| 47 | 47 | When the credential is delegated, the credential assigning the delegatable privilege, called the base credential, is included in a new credential signed by the owner of the base credential. The owner of the base credential is the issuer of the new credential. The new credential assigns privileges to an new owner. The new credential is valid if the base one is, if the delegated rights are marked delegatable, and the expiration time of the new credential is no longer than the base. This recurses. |
