%% You should probably cite rfc4853 instead of this I-D.
@techreport{ietf-smime-cms-mult-sign-03,
    number =    {draft-ietf-smime-cms-mult-sign-03},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-smime-cms-mult-sign/03/},
    author =    {Russ Housley},
    title =     {{Cryptographic Message Syntax (CMS) Multiple Signer Clarification}},
    pagetotal = 5,
    year =      2007,
    month =     feb,
    day =       14,
    abstract =  {This document updates the Cryptographic Message Syntax (CMS), which is published in RFC 3852. This document clarifies the proper handling of the SignedData protected content type when more than one digital signature is present. {[}STANDARDS-TRACK{]}},
}