RFC for x509 credential #282
Description
- How to deal with possible multiple values in certificate for fields like san:dns.
- What do we use for expiration date? Same as certificate
- Describe how trust of certificate is matched with credential. Lost of private key or domain name.