<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
text-align:justify;
font-size:10.5pt;
font-family:"Arial",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:42.0pt;
margin-bottom:.0001pt;
mso-para-margin-top:0in;
mso-para-margin-right:0in;
mso-para-margin-bottom:0in;
mso-para-margin-left:4.0gd;
mso-para-margin-bottom:.0001pt;
text-align:justify;
font-size:10.5pt;
font-family:"Arial",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Arial",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:99.25pt 85.05pt 85.05pt 85.05pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2070615007;
mso-list-type:hybrid;
mso-list-template-ids:-788492672 -1188127980 67698711 67698705 67698703 67698711 67698705 67698703 67698711 67698705;}
@list l0:level1
{mso-level-number-format:alpha-lower;
mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.25in;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:aiueo-full-width;
mso-level-text:"\(%2\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:42.0pt;
text-indent:-21.0pt;}
@list l0:level3
{mso-level-number-format:decimal-enclosed-circle;
mso-level-text:%3;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:63.0pt;
text-indent:-21.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:84.0pt;
text-indent:-21.0pt;}
@list l0:level5
{mso-level-number-format:aiueo-full-width;
mso-level-text:"\(%5\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:105.0pt;
text-indent:-21.0pt;}
@list l0:level6
{mso-level-number-format:decimal-enclosed-circle;
mso-level-text:%6;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-21.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:147.0pt;
text-indent:-21.0pt;}
@list l0:level8
{mso-level-number-format:aiueo-full-width;
mso-level-text:"\(%8\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:168.0pt;
text-indent:-21.0pt;}
@list l0:level9
{mso-level-number-format:decimal-enclosed-circle;
mso-level-text:%9;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:189.0pt;
text-indent:-21.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='text-justify-trim:punctuation'><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Forwarding to the public list for greater reach and commentary…<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal align=left style='text-align:left'><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> codesigning-bounces@cabforum.org [mailto:codesigning-bounces@cabforum.org] <b>On Behalf Of </b>Koichi Sugimoto<br><b>Sent:</b> Friday, May 06, 2016 5:59 AM<br><b>To:</b> codesigning@cabforum.org<br><b>Subject:</b> [cabfc_s] ambiguity implementing permanentIdentifier<o:p></o:p></span></p></div></div><p class=MsoNormal align=left style='text-align:left'><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>Hello,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>While I analyzing SubjectAltName:permanentIdentifier specified in section 9.7 of EV-Code-Signing-v.1.3.pdf,<br>I found an ambiguity of generating “STATE”.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>9.7 (B) 2) says:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>If applicable, the state, province, or locality of the Subject’s Jurisdiction of Incorporation in<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>uppercase characters as specified in the subjectjurisdictionOfIncorporationLocalityName or<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>subject:jurisdictionofIncorporationStateorProvinceName field, expressed in an unabbreviated<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>format (STATE);<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>Let JST be subjectjurisdictionOfIncorporationLocalityName and JL be subject:jurisdictionofIncorporationStateorProvinceName.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>In such case, following all patterns are acceptable?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:.25in;mso-para-margin-left:0gd;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:10.0pt;mso-fareast-language:JA'><span style='mso-list:Ignore'>a)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:10.0pt;mso-fareast-language:JA'>STATE=ST<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:.25in;mso-para-margin-left:0gd;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:10.0pt;mso-fareast-language:JA'><span style='mso-list:Ignore'>b)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:10.0pt;mso-fareast-language:JA'>STATE=JL-ST<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:.25in;mso-para-margin-left:0gd;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:10.0pt;background:yellow;mso-highlight:yellow;mso-fareast-language:JA'><span style='mso-list:Ignore'>c)<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span style='font-size:10.0pt;background:yellow;mso-highlight:yellow;mso-fareast-language:JA'>STATE=JL<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>I also have a problem of implementing JST and JL.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>Section 9.2.5 of EV-V1_5_9.pdf specifies how to implement JST, JL and JC (JC means subject:jurisdictionCountryName).<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>The specification says:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>For example, the Jurisdiction of Incorporation for an Incorporating Agency or<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>Jurisdiction of Registration for a Registration Agency that operates at the country level MUST include the country<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>information but MUST NOT include the state or province or locality information. Similarly, the jurisdiction for<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>the applicable Incorporating Agency or Registration Agency at the state or province level MUST include both<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>country and state or province information, but MUST NOT include locality information. And, the jurisdiction for<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>the applicable Incorporating Agency or Registration Agency at the locality level MUST include the country and<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>state or province information, where the state or province regulates the registration of the entities at the locality<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>level, as well as the locality information.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>I understand this definition as:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>If COUNTRY LEVEL<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>JC = xx<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>ELSE IF ST/P LEVEL<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>JC = xx, JST = yy<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>ELSE (=IF LOCALITY LEVEL) {<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>IF "state or province regulates the registration of the entities at the locality level"<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>JC = xx, JST = yy, JL = zz<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;background:yellow;mso-highlight:yellow;mso-fareast-language:JA'>ELSE (=IF "state or province does not regulate the registration of the entities at the locality level")<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;background:yellow;mso-highlight:yellow;mso-fareast-language:JA'>JC = xx, JL = zz</span><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>}<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>I am very interested in the yellow colored parts.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>If both are acceptable, it’s OK.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>But, if “c) STATE=JL” is not acceptable, then, how should we cope with the case of “JC=xx, JL=zz”?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'>And also if “JC=xx, JL=zz” is not acceptable, how should we cope with the case of “c) STATE=JL”?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;mso-fareast-language:JA'><o:p> </o:p></span></p><p class=MsoNormal style='line-height:13.0pt;mso-line-height-rule:exactly'><span style='font-size:10.0pt;mso-fareast-language:JA'>Regards,<o:p></o:p></span></p><p class=MsoNormal style='line-height:13.0pt;mso-line-height-rule:exactly'><span style='font-size:10.0pt;mso-fareast-language:JA'>Koichi Sugimoto.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:JA'><o:p> </o:p></span></p></div></body></html>