Need to decide how to canonicalize "issuer"

[ahouseholder]

This isn't directly addressable via the schema, but should be part of the documentation I think: We
should come up with guidance on what goes into the "issuer" field.

• Is it a name?
  "issuer": "CERT/CC"

• A url? More generically a uri? Is the scheme part actually necessary? Should it point to the org's main web site or the vuldb itself?

"issuer": "http://cve.mitre.org"
"issuer": "http://www.cert.org"

• A java-like reverse domain name ("org.mitre.cve", "org.cert.kb")

"issuer": "org.mitre.cve"
"issuer": "org.cert.kb"

• What if an org has >1 vuldb? Is this even worth worrying about before it happens?