This is part A of Scenario 2 (Scenario 2A). You need to be able to load this in conjunction with Scenario 2B or as a standalone scenario. The town of Bedrock issues certs to local businesses, such as the Quarry, to Government Employees, and to the Resident's Association. Although it has not yet done so, it is also allowed to issue certs to local social and civic organizations (Royal Order of the Water Buffalo, etc). It also realizes that it may not always be at the top of the naming tree, and has made provisions to be relegated to the second, or even the third level. Each of the above organizations issues certs to members or employees under the following guidelines. The resident's association issues certs to the head of each household, and that person can, in turn, issue certs to various family members. For example, Betty Rubble is the head of a household, and her family members are Barney Rubble and Bam Bam. The entity "GovEmployees" issues certs to employees of the local government, such as Mr. Granite and Barney Rubble (see note 1). The quarry issues certs to it's employees (such as Fred Flint, Joe Rockhead, Mr. Boulder, and Ms. LaRock--again, see note 1 w.r.t. Fred Flint). Issuer Subject Level Expiration Notes (see Note 2) Bedrock GovEmployees 3 M GovEmployees Bedrock 3 M Bedrock ResidentsAssc 2 S ResidentsAssc Bedrock 2 S Bedrock Quarry 3 M Quarry Bedrock 3 M ResidentsAssc WilmaFlint 2 M WilmaFlint ResidentsAssc 2 M WilmaFlint FredFlint 1 L see Note 1 FredFlint WilmaFlint 2 L see Note 1 WilmaFlint Pebbles 2 L Pebbles WilmaFlint 3 L WilmaFlint Dino 2 L Dino WilmaFlint 3 L ResidentsAssc BettyRubble 2 S BettyRubble ResidentsAssc 2 S BettyRubble BarneyRubble 1 L see Note 1 BarneyRubble BettyRubble 2 L see Note 1 BettyRubble BamBam 2 L BamBam BettyRubble 3 L Quarry MrSlate 3 L MrSlate Quarry 3 L Quarry FredFlint 2 L see Note 1 FredFlint Quarry 3 L see Note 1 Quarry JoeRockhead 2 L JoeRockhead Quarry 2 L Quarry MrBoulder 3 L MrBoulder Quarry 3 L Quarry MsLaRock 1 M MsLaRock Quarry 1 M GovEmployees MrGranite 3 S MrGranite GovEmployees 3 S GovEmployees BarneyRubble 2 L see Note 1 BarneyRubble GovEmployees 3 L see Note 1 Note 1: The FredFlint employed by the quarry is the very same guy as the FredFlint trusted by WilmaFlint, member of the Residents Association of Bedrock. Similarly, the BarneyRubble who is a GovEmployee is the very same BarneyRubble that is trusted by BettyRubble. Depending on your model, you might want to handle this in different ways. If you're doing a version of the "naming constraints" "bottom up" model, you'll probably find it easiest to just have two FredFlints, much as there is a Bob Fourney known as fourney@cs.umd.edu as well as a Bob Fourney known as knee@eng.umd.edu and a guy named Bob Fourney who posts to csd.cmsc414 as rf414042@umd.edu. In this case, all of the Bob Fourneys (or FredFlints or BarneyRubbles) should trust each other, so you should cross certify them at the highest level. If you're doing an anarchy model, or another model that doesn't rely on naming constraints, you can just have a single principal for FredFlint and another single principal for BarneyRubble. Note 2: The expiration field actually holds the expected length of validity. It is one of "S" (short), "M" (medium) or "L" (long). If no value is given the cert should have a long duration.