➢ The sensible thing at this point is to publish an update to RFC5280 that accepts reality. Yes, and there’s an IETF place to do that if anyone is interested; see the LAMPS working group. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users