<html>
  <head>
    <meta content="text/html; charset=GB2312" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Bonjour Wen-Cheng,<br>
      <br>
      The political situation of Taiwan complicates the OID arcs that
      depend on their recognition by UN (the 1.2.* and 2.16.* arcs).<br>
      <br>
      ITU X.660 defines rules for OID registration:<br>
       - under { iso(1) member-body(2) }, there's an integer taken from
      ISO3166-1 (the numeric country code), and this arc is assigned to
      the ISO national body of this country<br>
       - under { joint-iso-itu-t(2) country(16) }, numeric-3 codes of
      ISO3166-1 are reserved and assigned to registration authorities
      choosen by the country's ITU member state and ISO national body<br>
      <br>
      886 has never been the ISO 3166-1 numeric code of Taiwan (this
      code was attributed to Yemen).<br>
      886 is the telephone prefix code for Taiwan, that's all.<br>
      <br>
      By comparison, France telephone prefix code is 33, but ISO3166-1
      numeric code for France is 250. USA telephone country code is 1
      (shared with Canada, Puerto Rico, and others), USA ISO3166-1
      numeric code is 840.<br>
      <br>
      Nobody is free to take whatever OID arc they find pleasant. We
      must all follow rules for certificate issuance, there are also
      rules for the OID space.<br>
      <br>
      TWCA had the same problem for their EV OID, they were hijacking an
      OID under the 2.16.158 arc, refusing to request one from the
      official owner of this arc (TWRA). They were asked to request a
      dedicated arc under IANA PEN (1.3.6.1.4.1.40869).<br>
      <br>
      Political status of Taiwan is unfortunate, but if CABForum is
      willing to adopt rules for OV/DV OIDs as it has done for EV, what
      you're asking for is to import those political issues into
      CABForum, and to adopt a bad behaviour that will surely become a
      legacy problem in the future. Since you're not issuing EV
      certificates at the moment, you have no problem to switch to a
      IANA PEN OID.<br>
      <br>
      BTW, an official source of information for OID arcs is the
      <a class="moz-txt-link-abbreviated" href="http://www.oid-info.com">www.oid-info.com</a> site.<br>
      <br>
      <pre class="moz-signature" cols="72">-- 
Erwann ABALEA

</pre>
      Le 30/10/2014 12:49, 王文正 a écrit :<br>
    </div>
    <blockquote
cite="mid:20825998BCB8D84C983674C159E25E753D54BC87@mbs6.app.corp.cht.com.tw"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=GB2312">
      <meta name="Generator" content="Microsoft Word 14 (filtered
        medium)">
      <!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
      <style><!--
/* Font Definitions */
@font-face
        {font-family:SimSun;
        panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
        {font-family:PMingLiU;
        panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:PMingLiU;
        panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
        {font-family:"\@SimSun";
        panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        color:black;
        mso-fareast-language:ZH-CN;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        color:black;
        mso-fareast-language:ZH-CN;}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML \9810\8A2D\683C\5F0F \5B57\5143";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New";
        color:black;
        mso-fareast-language:ZH-CN;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"\8A3B\89E3\65B9\584A\6587\5B57 \5B57\5143";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        color:black;
        mso-fareast-language:ZH-CN;}
span.HTML
        {mso-style-name:"HTML \9810\8A2D\683C\5F0F \5B57\5143";
        mso-style-priority:99;
        mso-style-link:"HTML \9810\8A2D\683C\5F0F";
        font-family:"Courier New";
        color:black;
        mso-fareast-language:ZH-CN;}
span.a
        {mso-style-name:"\8A3B\89E3\65B9\584A\6587\5B57 \5B57\5143";
        mso-style-priority:99;
        mso-style-link:\8A3B\89E3\65B9\584A\6587\5B57;
        font-family:"Cambria","serif";
        color:black;
        mso-fareast-language:ZH-CN;}
span.TextodegloboCar
        {mso-style-name:"Texto de globo Car";
        mso-style-priority:99;
        mso-style-link:"Texto de globo";
        font-family:"Tahoma","sans-serif";}
p.Textodeglobo, li.Textodeglobo, div.Textodeglobo
        {mso-style-name:"Texto de globo";
        mso-style-priority:99;
        mso-style-link:"Texto de globo Car";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        color:black;
        mso-fareast-language:ZH-CN;}
span.HTMLPreformattedChar
        {mso-style-name:"HTML Preformatted Char";
        mso-style-priority:99;
        mso-style-link:"HTML Preformatted";
        font-family:Consolas;
        color:black;}
p.HTMLPreformatted, li.HTMLPreformatted, div.HTMLPreformatted
        {mso-style-name:"HTML Preformatted";
        mso-style-priority:99;
        mso-style-link:"HTML Preformatted Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        color:black;
        mso-fareast-language:ZH-CN;}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma","sans-serif";}
p.BalloonText, li.BalloonText, div.BalloonText
        {mso-style-name:"Balloon Text";
        mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";
        color:black;
        mso-fareast-language:ZH-CN;}
span.EmailStyle28
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle29
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle30
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle31
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle32
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle33
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle34
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle35
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle36
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle37
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
span.EmailStyle38
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
            lang="EN-US">Dear Erwann,<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
            lang="EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
            lang="EN-US">Indeed there are conflicts about which OID
            should Taiwan use due to very complicated political issues.<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
            lang="EN-US">The truth is Taiwan government has already used
            2.16.886 for many years. I do not think the CAB forum is
            willing to discuss political issues here. So why do we just
            leave it there unless the UN and the government decide to
            change the status.<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
            lang="EN-US"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span style="mso-fareast-language:ZH-TW"
            lang="EN-US"><img id="圖片_x0020_1"
              src="cid:part1.08030804.02040909@opentrust.com"
              width="529" height="544"></span><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
            lang="EN-US"><o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
            lang="EN-US"><o:p> </o:p></span></p>
        <div>
          <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:ZH-TW"
              lang="EN-US">Wen-Cheng Wang<o:p></o:p></span></p>
        </div>
        <p class="MsoNormal"><span
style="font-family:"Calibri","sans-serif";color:#1F497D"
            lang="EN-US"><o:p> </o:p></span></p>
        <div>
          <div style="border:none;border-top:solid #B5C4DF
            1.0pt;padding:3.0pt 0cm 0cm 0cm">
            <p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext;mso-fareast-language:ZH-TW"
                  lang="EN-US">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext;mso-fareast-language:ZH-TW"
                lang="EN-US"> <a class="moz-txt-link-abbreviated" href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a>
                [<a class="moz-txt-link-freetext" href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>On Behalf Of
                </b>Erwann Abalea<br>
                <b>Sent:</b> Thursday, October 30, 2014 6:53 PM<br>
                <b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:public@cabforum.org">public@cabforum.org</a><br>
                <b>Subject:</b> Re: [cabfpub] OIDs for DV and OV<o:p></o:p></span></p>
          </div>
        </div>
        <p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
        <div>
          <p class="MsoNormal"><span lang="EN-US">Except that the
              2.16.886 arc has never been assigned to Taiwan, so you
              cannot use it.<br>
              <br>
              <br>
              <o:p></o:p></span></p>
          <pre><span lang="EN-US">-- <o:p></o:p></span></pre>
          <pre><span lang="EN-US">Erwann ABALEA<o:p></o:p></span></pre>
          <pre><span lang="EN-US"><o:p> </o:p></span></pre>
          <p class="MsoNormal"><span lang="EN-US">Le 29/10/2014 11:46, </span><span
              style="font-family:SimSun" lang="ZH-CN">陳立群</span><span
              lang="EN-US"> a écrit :<o:p></o:p></span></p>
        </div>
        <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
          <p class="MsoNormal"><span style="color:#040498" lang="EN-US">Dear
              Dean,</span><span lang="EN-US"><o:p></o:p></span></p>
          <p class="MsoNormal"><span style="color:#040498" lang="EN-US"> </span><span
              lang="EN-US"><o:p></o:p></span></p>
          <p class="MsoNormal"><span style="color:#040498" lang="EN-US">    
              The OV OID used by Chunghwa Telecom Co., Ltd. is
              2.16.886.1.1.100.0.3.
            </span><span lang="EN-US"><o:p></o:p></span></p>
          <p class="MsoNormal"><span style="color:#040498" lang="EN-US"> </span><span
              lang="EN-US"><o:p></o:p></span></p>
          <p class="MsoNormal" style="text-indent:18.0pt"><span
              style="color:#040498" lang="EN-US">We will add CA/Browser
              Forum OV/DV OID to our SHA-2 intermediate CA and SHA-2 End
              Entity SSL Certificate about December. At present ,
              Chunghwa Telecom Co., Ltd. does not issue DV SSL
              certificate. </span><span lang="EN-US"><o:p></o:p></span></p>
        </blockquote>
        <p class="MsoNormal"><span style="font-family:SimSun"
            lang="EN-US"><o:p> </o:p></span></p>
      </div>
      <b><br>
        <br>
        <font size="-1">本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請
          銷毀此信件.
          如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以
          共同善盡資訊安全與個資保護責任. <br>
          Please be advised that this email message (including any
          attachments) contains confidential information and may be
          legally privileged. If you are not the intended recipient,
          please destroy this message and all attachments from your
          system and do not further collect, process, or use them.
          Chunghwa Telecom and all its subsidiaries and associated
          companies shall not be liable for the improper or incomplete
          transmission of the information contained in this email nor
          for any delay in its receipt or damage to your system. If you
          are the intended recipient, please protect the confidential
          and/or personal information contained in this email with due
          care. Any unauthorized use, disclosure or distribution of this
          message in whole or in part is strictly prohibited. Also,
          please self-inspect attachments and hyperlinks contained in
          this email to ensure the information security and to protect
          personal information.</font></b>
    </blockquote>
    <br>
  </body>
</html>