<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Bonjour,
<div class=""><br class="">
</div>
<div class="">I haven’t seen an authoritative definition of these 3 attributes, but always considered them the way Peter described them.</div>
<div class=""><br class="">
</div>
<div class="">Maybe Microsoft should propose a clear definition, using the syntax from RFC5912, something like this:</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">id-MS-jurisdictionLocalityName OBJECT IDENTIFIER ::= { 1 3 6 1 4 1 311 60 2 1 1 }</div>
<div class="">id-MS-jurisdictionStateOrProvinceName OBJECT IDENTIFIER ::= { 1 3 6 1 4 1 311 60 2 1 2 }</div>
<div class="">id-MS-jurisdictionCountryName OBJECT IDENTIFIER ::= { 1 3 6 1 4 1 311 60 2 1 3 }</div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">at-jurisdictionCountryName ATTRIBUTE ::= {</div>
<div class=""> TYPE PrintableString (SIZE (2))</div>
<div class=""> IDENTIFIED BY id-MS-jurisdictionCountryName</div>
<div class="">}</div>
<div class=""><br class="">
</div>
<div class="">at-jurisdictionStateOrProvinceName ATTRIBUTE ::= {</div>
<div class=""> TYPE DirectoryString {ub-state-name}</div>
<div class=""> IDENTIFIED BY id-MS-jurisdictionStateOrProvinceName</div>
<div class="">}</div>
<div class=""><br class="">
</div>
<div class="">at-jurisdictionLocalityName ATTRIBUTE ::= {</div>
<div class=""> TYPE DirectoryString {ub-locality-name}</div>
<div class=""> IDENTIFIED BY id-MS-jurisdictionLocalityName</div>
<div class="">}</div>
</div>
<div class=""><br class="">
</div>
<div class="">DirectoryString is also redefined in RFC5912 to have a size constraint.</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">
<div class="">Cordialement,</div>
<div class="">Erwann Abalea</div>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">Le 29 juin 2016 à 17:08, 陳立群 <<a href="mailto:realsky@cht.com.tw" class="">realsky@cht.com.tw</a>> a écrit :</div>
<br class="Apple-interchange-newline">
<div class="">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)" class="">
<style class=""><!--
/* Font Definitions */
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@新細明體";
panose-1:2 2 5 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"純文字 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"註解方塊文字 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:"Cambria","serif";}
span.a
{mso-style-name:"純文字 字元";
mso-style-priority:99;
mso-style-link:純文字;
font-family:"Calibri","sans-serif";}
span.a0
{mso-style-name:"註解方塊文字 字元";
mso-style-priority:99;
mso-style-link:註解方塊文字;
font-family:"Cambria","serif";}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"新細明體","serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
/* Page Definitions */
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="ZH-TW" link="blue" vlink="purple" style="text-justify-trim:punctuation" class="">
<div class="WordSection1">
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> In X.520 as attached file or RFC 5280(<a href="https://tools.ietf.org/html/rfc5280" class="">https://tools.ietf.org/html/rfc5280</a>) , There are no jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1),
<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2), jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3). You can use search function to search attached PDF file.
<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<p class="MsoPlainText" style="text-indent:12.0pt"><span lang="EN-US" class="">These three OIDs are registered by Microsoft. Please see
<a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.1.html" class="">
http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.1.html</a>, <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.2.html" class="">
http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.2.html</a> and <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.3.html" class="">
http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.3.html</a> <o:p class="">
</o:p></span></p>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> Peter referenced EV GL 9.2.5 such as
<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">Naming attributes of type X520LocalityName<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">id-at-localityName AttributeType ::= { id-at 7 }<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> that id is 2.5.4. <o:p class="">
</o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> But Country Name (2.5.4.6), State or Province Name (2.5.4.8) and Locality Name (2.5.4.7) are appeared in X.520.
<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> <o:p class=""></o:p></span></div>
<p class="MsoPlainText" style="text-indent:42.0pt"><span lang="EN-US" class="">Li-Chun CHEN<o:p class=""></o:p></span></p>
<div class="MsoPlainText"><span lang="EN-US" class=""> <o:p class=""></o:p></span></div>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody class="">
<tr class="">
<td style="padding:.75pt .75pt .75pt .75pt" class="">
<p class="line862" style="text-indent:6.0pt"><span lang="EN-US" class=""> <o:p class=""></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<div class="MsoPlainText"><span lang="EN-US" class=""> <o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-----Original Message-----<br class="">
From: <a href="mailto:public-bounces@cabforum.org" class="">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org" class="">mailto:public-bounces@cabforum.org</a>] On Behalf Of Peter Bowen<br class="">
Sent: Friday, June 17, 2016 4:52 AM<br class="">
To: CABFPub<br class="">
Subject: [cabfpub] EV Gudelines section 9.2.5 & X.520</span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">On today</span><span lang="EN-US" style="font-family:"Courier New"" class="">’</span><span lang="EN-US" class="">s validation working group call, there was a question about how X.520 related to the attributes
defined in section 9.2.5 of the EV Guidelines.<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">This section says:<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">"Locality (if required):<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">subject:jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1)
<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">ASN.1 - X520LocalityName as specified in RFC 5280<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">State or province (if required):<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">subject:jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2)<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">ASN.1 - X520StateOrProvinceName as specified in RFC 5280
<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">Country:<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">subject:jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3)
<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">ASN.1 </span><span lang="EN-US" style="font-family:"Courier New"" class="">–</span><span lang="EN-US" class=""> X520countryName as specified in RFC 5280"<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">The ASN.1 definitions all reference RFC 5280 and are defined in Appendix A. They are copied at the end of this email. RFC 5280 also says " The DirectoryString type is defined as a choice of PrintableString,
TeletexString, BMPString, UTF8String, and UniversalString. CAs conforming to this profile MUST use either the PrintableString or UTF8String encoding of DirectoryString</span><span lang="EN-US" style="font-family:"Courier New"" class="">”</span><span lang="EN-US" class=""><o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">Taken together, this means:<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3) must be a PrintableString with two characters which together are a
</span><span lang="EN-US" style="font-family:"Courier New"" class="">“</span><span lang="EN-US" class="">alpha 2</span><span lang="EN-US" style="font-family:"Courier New"" class="">”</span><span lang="EN-US" class=""> code defined in ISO 3166 Part 1.<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2), if included, should be either a PrintableString or UTF8String and must contain at least 1 and not more than 128 characters.<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1), if included, shoud be either a PrintableString or UTF8String and must contain at least 1 and not more than 128 characters.<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">The appropriate values for these attributes, and when one needs to include the the latter two, is defined in section 9.2.5 as well.<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">Does this help clarify how these attributes work?<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">Thanks,<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">Peter<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Naming attributes of type X520LocalityName<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">id-at-localityName AttributeType ::= { id-at 7 }<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Naming attributes of type X520LocalityName:<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- X520LocalityName ::= DirectoryName (SIZE (1..ub-locality-name))<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">--<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Expanded to avoid parameterized type:<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">X520LocalityName ::= CHOICE {<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> teletexString TeletexString (SIZE (1..ub-locality-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> printableString PrintableString (SIZE (1..ub-locality-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> universalString UniversalString (SIZE (1..ub-locality-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> utf8String UTF8String (SIZE (1..ub-locality-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> bmpString BMPString (SIZE (1..ub-locality-name)) }<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Naming attributes of type X520StateOrProvinceName<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">id-at-stateOrProvinceName AttributeType ::= { id-at 8 }<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Naming attributes of type X520StateOrProvinceName:<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- X520StateOrProvinceName ::= DirectoryName (SIZE (1..ub-state-name))<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">--<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Expanded to avoid parameterized type:<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">X520StateOrProvinceName ::= CHOICE {<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> teletexString TeletexString (SIZE (1..ub-state-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> printableString PrintableString (SIZE (1..ub-state-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> universalString UniversalString (SIZE (1..ub-state-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> utf8String UTF8String (SIZE (1..ub-state-name)),<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> bmpString BMPString (SIZE (1..ub-state-name)) }<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Naming attributes of type X520countryName (digraph from IS 3166)<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">id-at-countryName AttributeType ::= { id-at 6 }<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">X520countryName ::= PrintableString (SIZE (2))<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">-- Upper Bounds<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">ub-locality-name INTEGER ::= 128<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">ub-state-name INTEGER ::= 128<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""> </span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">_______________________________________________<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class="">Public mailing list<o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""><a href="mailto:Public@cabforum.org" class=""><span style="color:windowtext;text-decoration:none" class="">Public@cabforum.org</span></a><o:p class=""></o:p></span></div>
<div class="MsoPlainText"><span lang="EN-US" class=""><a href="https://cabforum.org/mailman/listinfo/public" class=""><span style="color:windowtext;text-decoration:none" class="">https://cabforum.org/mailman/listinfo/public</span></a><o:p class=""></o:p></span></div>
</div>
</div>
<br class="">
<div class="">
<div class="">本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任. </div>
<div class="">Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and
do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or
damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited.
Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<span id="cid:FC6770CD-E48C-4E39-B0C5-9BC17C9973AA"><T-REC-X.520-201210-I!!PDF-E.pdf></span>_______________________________________________<br class="">
Public mailing list<br class="">
<a href="mailto:Public@cabforum.org" class="">Public@cabforum.org</a><br class="">
https://cabforum.org/mailman/listinfo/public<br class="">
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>