How to encode extension / attribute if the extension / attribute value cannot be CBOR encoded?

[xipki]

To encode the extension / attribute value in CBOR, pre-conditions have to be satisifed. It is not clear how to encode them in negative cases.

Considering the extension CertificatePolicies as example, shall it be encoded as option 1 or option 2?

• Option 1: (extenionID : uint, extensionValue : bstr)
• Option 2: (extensionID: ~oid/pen, ?critical, extensionValue: bstr)

[highlunder]

Recap of discussion: yes option 1 can cause problems for the future, if we are later adding cbor encoding/decoding of the values. To be further looked into!

[gselander]

The design team are currently in favor of specifying option 2. @xipki is welcome to make a PR before the cutoff if time permits.