CN specification for hosts in pkinit certs

[Greg Hudson]

On 01/08/2014 06:26 AM, lux-integ wrote:
> I am editing the openssl.cnf and for users certs  
> I  use     
> user at REALM   for the CN  (commmonName) and 
> emailaddress  for emailAddress
> 
> for hosts  I omit the email address  but I am a bit puzzled what to use for CN
> (commonName)

I don't think our PKINIT code looks at the CN field, so you can use
whatever you want there.