X.509 Version 3 Extensions

• Added optional extensions rather than fixed fields

• {extension id, criticality indicator, extension value}

• Three main categories:

  • Key and policy information – EDI only
  • Certificate subject and issuer attributes – alternative names
  • Certification Path Constraints - restrictions