# @(#)$Id: 98ef0ee5.signing_policy,v 1.2 2011/06/26 08:41:27 pmacvsdg Exp $
 access_id_CA   X509    '/C=UK/O=eScienceRoot/OU=Authority/CN=UK e-Science Root'
 pos_rights     globus  CA:sign
 cond_subjects  globus  '"/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2A" "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B"'

# Uncomment the following instead, to enable the SLCS branches:
# cond_subjects  globus  '"/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2A" "/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B" "/C=UK/O=eScienceSLCSHierarchy/OU=Authority/CN=SLCS Top Level CA"'