Comment by antsar

AFAIK it was built-in from the start, as far as the X.509 protocol is concerned. Its just not used anywhere.

http://tools.ietf.org/html/rfc5280#section-4.2.1.10