<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> public-bounces@cabforum.org [mailto:public-bounces@cabforum.org] <b>On Behalf Of </b>Erwann Abalea<br><b>Sent:</b> Tuesday, July 31, 2012 11:58 AM<br><br></span></p><div><p class=MsoNormal>On the same subject, same location, other certificates.<br><br>Last year Kosovo deployed biometric passports (ICAO MRTD and EAC) obviously for internal use only, and they choosed "KS" as the alpha-2 country code.<br>This country code is present in CSCA root certificate and in DS certificates.<br><br>"KS" is declared as free for assignment by ISO 3166/MA only.<br>While they're practically free to use anything they want in their private certificates, I don't recommend using "KS" for public facing certificates.<br>And I'm not in favor of allowing "XK" for EV certificates.<span style='color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><b><i><span style='color:#1F497D'>[RWS] I disagree on this. Our CA is incorporated and operating in jurisdictions (US and UK) which fully recognize the sovereignty of the Republic of Kosovo. As such, I don't see any reason, either from my perspective, or that of the customer, to be forced to put in Serbia in an EV certificate. It is incorrect and inaccurate as far as we are concerned. As per the laws of the jurisdictions to which I and the customer are subject both the country AND the government entity legally exist. It should also be noted that the UK Home Office is using ISO 3166 alpha 3: XXK as a designator for Kosovo.<o:p></o:p></span></i></b></p><p class=MsoNormal><br><br><br><o:p></o:p></p><pre>-- <o:p></o:p></pre><pre>Erwann ABALEA<o:p></o:p></pre><pre><o:p> </o:p></pre><p class=MsoNormal>Le 31/07/2012 12:17, William Madell a écrit :<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal><span style='color:#1F497D'>Agreed – the CABF can decide to use ‘XK’ as its user-assigned country code for Kosovo within the context of the BRs (perhaps, also in the context of EV?). </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>As Erwann recommends, the CABF should publicly document that decision – I suggest as either an erratum or appendix to the BRs.</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'>Bill</span><o:p></o:p></p><p class=MsoNormal><span style='color:#1F497D'> </span><o:p></o:p></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Erwann Abalea<br><b>Sent:</b> 31 July 2012 10:46<br><b>To:</b> <a href="mailto:public@cabforum.org">public@cabforum.org</a><br><b>Subject:</b> Re: [cabfpub] ISO 3166-1 country codes</span><o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><div><p class=MsoNormal>Nice question.<br><br>XK being one of the "user-assigned code elements", it can therefore be freely used wherever you want, and it won't be used in any update of the standard.<br><a href="http://www.iso.org/iso/home/standards/country_codes/special-code-elements-iso-3166.htm#Reserved-code-elements">http://www.iso.org/iso/home/standards/country_codes/special-code-elements-iso-3166.htm#Reserved-code-elements</a> is pretty clear on the purpose and limits of the user-assigned codes.<br>Faced with such a request, I'd also tend to approve it, publicly document the use of "XK" code to designate "Kosovo", and notify the ISO-3166/MA of the use of this code.<br><br>EU hasn't recognized Kosovo as an independant nation, it's strange that XK is used by the EC.<br><br><br><br><o:p></o:p></p><pre>-- <o:p></o:p></pre><pre>Erwann ABALEA<o:p></o:p></pre><pre> <o:p></o:p></pre><p class=MsoNormal>Le 30/07/2012 22:39, Rich Smith a écrit :<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal>I've come across an edge case that I'd like to get some discussion on.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>We have received a request for a customer in Kosovo, which the two jurisdictions to which we are subject (US and UK) recognize as a sovereign country. However because there is still some wrangling going on in the UN, Kosovo does not at this time have an official ISO 3166 country code.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>I came across some information that the European Commission, Switzerland, and the Deutsche Bundesbank among others are temporarily using XK as a designator for Kosovo. Any thought as to whether or not doing the same in a certificate would be in compliance with Section 9.2.5 of the BRs?<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>9.2.5 Subject Country Name Field<o:p></o:p></p><p class=MsoNormal>Certificate Field: subject:countryName (OID: 2.5.4.6)<o:p></o:p></p><p class=MsoNormal>Required/Optional: Optional<o:p></o:p></p><p class=MsoNormal>Contents: If the subject:countryName field is present, then the CA SHALL verify the country associated with the Subject in accordance with Section 11.2.5 and use its two-letter ISO 3166-1 country code.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Since XK is set aside by the ISO as user assigned, I tend to lean toward allowing it, but I also think that we should probably decide as a group so that we all (at least all in jurisdictions which recognize Kosovo) treat Kosovo in a uniform fashion. Thoughts?<o:p></o:p></p></blockquote></blockquote><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div></div></body></html>