%% You should probably cite draft-ietf-pkix-authorityclearanceconstraints instead of this I-D. @techreport{turner-caclearanceconstraints-02, number = {draft-turner-caclearanceconstraints-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-turner-caclearanceconstraints/02/}, author = {Sean Turner and Dr. Santosh Chokhani}, title = {{Clearance Attribute and Authority Clearance Constraints Certificate Extension}}, pagetotal = 19, year = 2008, month = nov, day = 1, abstract = {This document defines the syntax and semantics for the Clearance attribute and the Authority Clearance Constraints extension in X.509 certificates. The Clearance attribute is used to indicate the clearance held by the subject. The Clearance attribute may appear in the subject directory attributes extension of a public key certificate or in the attributes field of an attribute certificate. The Authority Clearance Constraints certificate extension values in a Trust Anchor (TA), CA public key certificates, and an Attribute Authority (AA) public key certificate in a public key certification path constrain the effective Clearance of the subject.}, }