[cabfpub] Mozilla SHA-1 further restrictions (v4)

[Gervase Markham]

On 12/01/17 19:34, Tim Shirley wrote:
> Besides EKU, I presume this should also list adding the pathlen:0
> constraint if it was previously absent. 

Yes.

> It would probably be good to
> include serial number as well, so no one could interpret this as a
> requirement to duplicate a serial number.

Yes. Serial number must be of the same length.

Gerv