It's defined in X.520/X.521 but was accidentally left out of 2256. We put it in RFC 2798, and it should move back to core when 2256 is reissued. Mark Wahl Sun Microsystems, Inc.