3. So why not simply permit the use of ENs? A very good idea. We've
already said we'd do this. But then a funny thing happened. The
X.DN structure is a tad too restrictive. I'm told that some of the
normal EN special characters aren't permitted in ordinary text
values. Also, it's not clear what OID to use.
Solve these two "minor" technical glitches, and we're a long way
toward a solution that retains the current structure but would
permit incorporating ENs.
Why not use the EmailAddress attribute defined in PKCS #9 (section
6.1) ?
-steve