Possible ambiguity in keyUsage table

[srdavidson]

It has been pointed out that some of the language in the table of 7.1.2.3 (e) could be viewed as ambiguous.

For dual use, bit positions SHALL be set for digitalSignature and keyEncipherment and MAY be set for nonRepudiation and dataEncipherment.

For clarity, the intended reading is

For dual use, bit positions SHALL be set for digitalSignature, SHALL be set for keyEncipherment, MAY be set for nonRepudiation, and MAY be set for dataEncipherment.

(In other words, nonRepudiation and dataEncipherment are not treated as a unit).

Similar text exists in the other columns.

[srdavidson]

See proposed text at srdavidson@63f5436