Hi,

We are Netrust, a commercial and licensed CA operating from Singapore. 

We would like to comment on one of the recommendations in the Grid 

Certificate Profile, namely Section 2.4.1 which currently mandates the 

"Basic Constraints" field as "critical".

We have written a white paper explaining the rational for NOT marking 

this field as critical. While the criticality is intended for a CA to 

make the use of its certificates more robust, the verification systems 

currently in use do not factor the criticality of many of these 

extensions, even according to the RFC 3280. Only the actual value of the 

"Basic Constraints" field influences the verification decision.

We would like the comments of the community on the same.

Regards,
Vivek Kaushik.
Principal Consultant
Netrust Pte Ltd
Singapore.