<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Are those certificates remain valid after the July 1st?</p>
<p>Thanks,</p>
<p>M.D.<br>
</p>
<br>
<div class="moz-cite-prefix">On 7/6/2016 11:55 PM, Dean Coclin
wrote:<br>
</div>
<blockquote
cite="mid:BY2PR16MB015206753A0B1BFCEA6F89FCFA3A0@BY2PR16MB0152.namprd16.prod.outlook.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1610627296;
mso-list-template-ids:1427162482;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I
recall there being some discussion on another list about
this (perhaps Mozilla) and maybe others that follow that
could comment.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">If
you want to bring this up on the CABF call, please let me
know. Unfortunately this week’s agenda is full but we could
schedule it for 2 weeks from now.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><br>
Thanks<br>
Dean<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<a class="moz-txt-link-abbreviated" href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a>
[<a class="moz-txt-link-freetext" href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Chema
Lopez<br>
<b>Sent:</b> Wednesday, June 29, 2016 1:34 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:public@cabforum.org">public@cabforum.org</a><br>
<b>Subject:</b> [cabfpub] SAN private extensions pursuant
specific SSL/EV Spanish ruled profile<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Dear all.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">There was a law in Spain that regulates
the profile for some specific certificates, i.e.:<o:p></o:p></p>
</div>
<div>
<ol start="1" type="1">
<li class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0
level1 lfo1">Civil Servant or Public Employee (natural
person certificate)<o:p></o:p></li>
<li class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0
level1 lfo1">Electronic Seal for Automated
Administrative Action<o:p></o:p></li>
<li class="MsoNormal"
style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0
level1 lfo1">Electronic Office Certificate (SSL or EV
for Public Administrations)<o:p></o:p></li>
</ol>
<div>
<p class="MsoNormal">You can find the profiles
attached (unfortunately only in Spanish).<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The problem is that these profiles
required private extensions in the SAN, and this conflicts
BR and EV Guidelines. At least, crt.sh shows this
extensions as an error. See the private extensions below.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><img id="_x0000_i1025"
src="cid:part1.9C38F755.E8AF3115@ssc.lt" alt="Inline
images 1" height="183" width="544"><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This law has been repealed recently and
the new one does not require this extensions but, how do
we, Spanish TSP, handle the SSL and EV certificates issued
following the previous law? In my opinion, an exception
needs to be added.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks in advance for your comments.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<table class="MsoNormalTable" border="0"
cellpadding="0">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt
.75pt"><br>
</td>
<td style="padding:.75pt .75pt .75pt
.75pt">
<p><b><span
style="font-family:"Arial",sans-serif;color:#999999">Chema
López González<br>
Director Área de Innovación,
Cumplimiento y Tecnología<br>
AC Firmaprofesional S.A.</span></b><span
style="font-family:"Arial",sans-serif;color:#999999"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt
.75pt"><br>
</td>
<td style="padding:.75pt .75pt .75pt
.75pt">
<p class="MsoNormal"><span
style="font-family:"Arial",sans-serif"><br>
<span style="color:#999999">Av.
Torre Blanca, 57.</span> <br>
<span style="color:#999999">Edificio
ESADECREAPOLIS - 1B13</span><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Arial",sans-serif;color:#999999">08173
Sant Cugat del Vallès.
Barcelona.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-family:"Arial",sans-serif;color:#999999">Tel: </span><span
style="font-family:"Arial",sans-serif">93.477.42.45<span
style="color:#999999"> /</span><span
style="color:#3333FF"> 666.429.224</span><o:p></o:p></span></p>
</div>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span
style="font-family:"Arial",sans-serif">El
contenido de este mensaje y de sus
anexos es confidencial. Si no es el
destinatario, le hacemos saber que
está prohibido utilizarlo,
divulgarlo y/o copiarlo sin tener la
autorización correspondiente. Si ha
recibido este mensaje por error, le
agradeceríamos que lo haga saber
inmediatamente al remitente y que
proceda a destruir el mensaje.<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
</body>
</html>