X.509 Version 3 Requirements

• Subject field needs to convey more information about the key owner

• Subject field needs more info for applications: IP address, URL

• Indicate security policy information (IPSec)

• Set constraints on certificate applicability – limit damage from faulty CA

• Identify separately different keys used by the same owner at different times – key life cycle management