On 5/22/07, Ken Renard <kdrenard at wareonearth.com> wrote: > I like the idea of looking at specific EKUs (beyond digital > signature) as well. OK. > When you are matching a SAN, are you matching against a specific type > of SAN or all types? My intention was to look at pkinit-san and upn-san.