<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@新細明體";
panose-1:2 2 5 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"純文字 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"註解方塊文字 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:"Cambria","serif";}
span.a
{mso-style-name:"純文字 字元";
mso-style-priority:99;
mso-style-link:純文字;
font-family:"Calibri","sans-serif";}
span.a0
{mso-style-name:"註解方塊文字 字元";
mso-style-priority:99;
mso-style-link:註解方塊文字;
font-family:"Cambria","serif";}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"新細明體","serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
/* Page Definitions */
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-TW link=blue vlink=purple style='text-justify-trim:punctuation'><div class=WordSection1><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US> In X.520 as attached file or RFC 5280(<a href="https://tools.ietf.org/html/rfc5280">https://tools.ietf.org/html/rfc5280</a>) , There are no jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1), <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2), jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3). You can use search function to search attached PDF file. <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='text-indent:12.0pt'><span lang=EN-US>These three OIDs are registered by Microsoft. Please see <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.1.html">http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.1.html</a>, <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.2.html">http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.2.html</a> and <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.3.html">http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.3.html</a> <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US> Peter referenced EV GL 9.2.5 such as <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Naming attributes of type X520LocalityName<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>id-at-localityName AttributeType ::= { id-at 7 }<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US> that id is 2.5.4. <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US> But Country Name (2.5.4.6), State or Province Name (2.5.4.8) and Locality Name (2.5.4.7) are appeared in X.520. <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <o:p></o:p></span></p><p class=MsoPlainText style='text-indent:42.0pt'><span lang=EN-US>Li-Chun CHEN<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> <o:p></o:p></span></p><table class=MsoNormalTable border=0 cellpadding=0><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=line862 style='text-indent:6.0pt'><span lang=EN-US> <o:p></o:p></span></p></td></tr></table><p class=MsoPlainText><span lang=EN-US> <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>-----Original Message-----<br>From: public-bounces@cabforum.org [mailto:public-bounces@cabforum.org] On Behalf Of Peter Bowen<br>Sent: Friday, June 17, 2016 4:52 AM<br>To: CABFPub<br>Subject: [cabfpub] EV Gudelines section 9.2.5 & X.520</span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>On today</span><span lang=EN-US style='font-family:"Courier New"'>’</span><span lang=EN-US>s validation working group call, there was a question about how X.520 related to the attributes defined in section 9.2.5 of the EV Guidelines.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>This section says:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>"Locality (if required):<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>subject:jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1) <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ASN.1 - X520LocalityName as specified in RFC 5280<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>State or province (if required):<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>subject:jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2)<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ASN.1 - X520StateOrProvinceName as specified in RFC 5280 <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Country:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>subject:jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3) <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ASN.1 </span><span lang=EN-US style='font-family:"Courier New"'>–</span><span lang=EN-US> X520countryName as specified in RFC 5280"<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>The ASN.1 definitions all reference RFC 5280 and are defined in Appendix A. They are copied at the end of this email. RFC 5280 also says " The DirectoryString type is defined as a choice of PrintableString, TeletexString, BMPString, UTF8String, and UniversalString. CAs conforming to this profile MUST use either the PrintableString or UTF8String encoding of DirectoryString</span><span lang=EN-US style='font-family:"Courier New"'>”</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Taken together, this means:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3) must be a PrintableString with two characters which together are a </span><span lang=EN-US style='font-family:"Courier New"'>“</span><span lang=EN-US>alpha 2</span><span lang=EN-US style='font-family:"Courier New"'>”</span><span lang=EN-US> code defined in ISO 3166 Part 1.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2), if included, should be either a PrintableString or UTF8String and must contain at least 1 and not more than 128 characters.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1), if included, shoud be either a PrintableString or UTF8String and must contain at least 1 and not more than 128 characters.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>The appropriate values for these attributes, and when one needs to include the the latter two, is defined in section 9.2.5 as well.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Does this help clarify how these attributes work?<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Thanks,<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Peter<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Naming attributes of type X520LocalityName<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>id-at-localityName AttributeType ::= { id-at 7 }<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Naming attributes of type X520LocalityName:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- X520LocalityName ::= DirectoryName (SIZE (1..ub-locality-name))<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>--<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Expanded to avoid parameterized type:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>X520LocalityName ::= CHOICE {<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> teletexString TeletexString (SIZE (1..ub-locality-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> printableString PrintableString (SIZE (1..ub-locality-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> universalString UniversalString (SIZE (1..ub-locality-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> utf8String UTF8String (SIZE (1..ub-locality-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> bmpString BMPString (SIZE (1..ub-locality-name)) }<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Naming attributes of type X520StateOrProvinceName<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>id-at-stateOrProvinceName AttributeType ::= { id-at 8 }<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Naming attributes of type X520StateOrProvinceName:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- X520StateOrProvinceName ::= DirectoryName (SIZE (1..ub-state-name))<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>--<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Expanded to avoid parameterized type:<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>X520StateOrProvinceName ::= CHOICE {<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> teletexString TeletexString (SIZE (1..ub-state-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> printableString PrintableString (SIZE (1..ub-state-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> universalString UniversalString (SIZE (1..ub-state-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> utf8String UTF8String (SIZE (1..ub-state-name)),<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US> bmpString BMPString (SIZE (1..ub-state-name)) }<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Naming attributes of type X520countryName (digraph from IS 3166)<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>id-at-countryName AttributeType ::= { id-at 6 }<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>X520countryName ::= PrintableString (SIZE (2))<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>-- Upper Bounds<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>ub-locality-name INTEGER ::= 128<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>ub-state-name INTEGER ::= 128<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>_______________________________________________<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>Public mailing list<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><a href="mailto:Public@cabforum.org"><span style='color:windowtext;text-decoration:none'>Public@cabforum.org</span></a><o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><a href="https://cabforum.org/mailman/listinfo/public"><span style='color:windowtext;text-decoration:none'>https://cabforum.org/mailman/listinfo/public</span></a><o:p></o:p></span></p></div></body></html><br><html><div><div>本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任. </div><div>Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.</div></div><div><br></div><div><br></div></html>