<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:細明體;
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:細明體;
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:微軟正黑體;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@微軟正黑體";
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@新細明體";
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"\@細明體";
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:Cambria-Bold;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
color:windowtext;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"純文字 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
color:windowtext;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"新細明體","serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML 預設格式 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:細明體;
color:windowtext;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"註解方塊文字 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
color:windowtext;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:24.0pt;
margin-bottom:.0001pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:0cm;
mso-para-margin-left:2.0gd;
mso-para-margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.a
{mso-style-name:"純文字 字元";
mso-style-priority:99;
mso-style-link:純文字;
font-family:"Calibri","sans-serif";}
span.a0
{mso-style-name:"註解方塊文字 字元";
mso-style-priority:99;
mso-style-link:註解方塊文字;
font-family:"Cambria","serif";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:windowtext;}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"新細明體","serif";
color:windowtext;}
p.PlainText, li.PlainText, div.PlainText
{mso-style-name:"Plain Text";
mso-style-link:"Plain Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
p.BalloonText, li.BalloonText, div.BalloonText
{mso-style-name:"Balloon Text";
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Segoe UI","sans-serif";}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle29
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.HTML
{mso-style-name:"HTML 預設格式 字元";
mso-style-priority:99;
mso-style-link:"HTML 預設格式";
font-family:細明體;}
span.shorttext
{mso-style-name:short_text;}
span.langwithname
{mso-style-name:langwithname;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:35785652;
mso-list-type:hybrid;
mso-list-template-ids:-682884150 -626460558 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:48.0pt;
text-indent:-18.0pt;}
@list l0:level2
{mso-level-number-format:ideograph-traditional;
mso-level-text:%2、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:78.0pt;
text-indent:-24.0pt;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:102.0pt;
text-indent:-24.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:126.0pt;
text-indent:-24.0pt;}
@list l0:level5
{mso-level-number-format:ideograph-traditional;
mso-level-text:%5、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:150.0pt;
text-indent:-24.0pt;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:174.0pt;
text-indent:-24.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:198.0pt;
text-indent:-24.0pt;}
@list l0:level8
{mso-level-number-format:ideograph-traditional;
mso-level-text:%8、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:222.0pt;
text-indent:-24.0pt;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:246.0pt;
text-indent:-24.0pt;}
@list l1
{mso-list-id:957640397;
mso-list-type:hybrid;
mso-list-template-ids:504411914 -106945966 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l1:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:18.0pt;
text-indent:-18.0pt;}
@list l1:level2
{mso-level-number-format:ideograph-traditional;
mso-level-text:%2、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:48.0pt;
text-indent:-24.0pt;}
@list l1:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:72.0pt;
text-indent:-24.0pt;}
@list l1:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:96.0pt;
text-indent:-24.0pt;}
@list l1:level5
{mso-level-number-format:ideograph-traditional;
mso-level-text:%5、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:120.0pt;
text-indent:-24.0pt;}
@list l1:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:144.0pt;
text-indent:-24.0pt;}
@list l1:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:168.0pt;
text-indent:-24.0pt;}
@list l1:level8
{mso-level-number-format:ideograph-traditional;
mso-level-text:%8、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:192.0pt;
text-indent:-24.0pt;}
@list l1:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:216.0pt;
text-indent:-24.0pt;}
@list l2
{mso-list-id:1880555992;
mso-list-type:hybrid;
mso-list-template-ids:-1654652804 -1366665662 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l2:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:18.0pt;
text-indent:-18.0pt;}
@list l2:level2
{mso-level-number-format:ideograph-traditional;
mso-level-text:%2、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:48.0pt;
text-indent:-24.0pt;}
@list l2:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:72.0pt;
text-indent:-24.0pt;}
@list l2:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:96.0pt;
text-indent:-24.0pt;}
@list l2:level5
{mso-level-number-format:ideograph-traditional;
mso-level-text:%5、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:120.0pt;
text-indent:-24.0pt;}
@list l2:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:144.0pt;
text-indent:-24.0pt;}
@list l2:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:168.0pt;
text-indent:-24.0pt;}
@list l2:level8
{mso-level-number-format:ideograph-traditional;
mso-level-text:%8、;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:192.0pt;
text-indent:-24.0pt;}
@list l2:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
margin-left:216.0pt;
text-indent:-24.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-TW link=blue vlink=purple style='text-justify-trim:punctuation'><div class=WordSection1><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='color:#1F497D'>I did thank for Ben’ record of July 1’s Policy Review Working Group Call and Peter’s asking .<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> Because there are two issues, I modify the subject to “Suggestion to amend BR Section7.1.4.2.2d/e”. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> And left the second issue about EV Gudelines section 9.2.5 & X.520, RFC 5280 in RE: [cabfpub] EV Gudelines section 9.2.5 & X.520<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>To prevent presentation layout problem , I attached word and pdf version as attached file, and past as below for further discussion. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal align=center style='text-align:center'><span lang=EN-US style='color:#1F497D'> </span><b><span lang=EN-US style='font-size:14.0pt'>Amend of SSL BR section 7.1.4.2.2 d & e<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US>Statement of intent:<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>In SSL BR section 7.1.4.2.2 d & e, either localityName or stateOrProvinceName is required for OV and IV SSL Certificates. As </span><span lang=EN-US>CABF Bugzilla </span><span style='font-family:"新細明體","serif"'>–</span><span lang=EN-US> Bug#2 </span><span lang=EN-US><a href="https://bugzilla.cabforum.org/show_bug.cgi?id=2">https://bugzilla.cabforum.org/show_bug.cgi?id=2</a></span><span lang=EN-US> , </span><span lang=EN-US>We amend section 7.1.4.2.2 d & e to solve below situations: <o:p></o:p></span></p><p class=MsoPlainText><b><span lang=EN-US>(1). For small countries/jurisdictions, if they do not set up any state or province. </span></b><span lang=EN-US>Some CAs </span><span class=shorttext><span lang=EN style='font-family:"Arial","sans-serif";color:#222222'>misplaced absence province or state name.</span></span><span lang=EN> </span><span lang=EN-US><o:p></o:p></span></p><p class=MsoPlainText><b><span lang=EN-US>(2). The organizationName is already unique at the country level. <o:p></o:p></span></b></p><p class=MsoPlainText style='text-indent:18.0pt'><span lang=EN-US>If the subject:organizationName and subject:countryName fields are present and the country/jurisdiction specified by the subject:countryName field has a centralized registry for that kind of organizations so that the organization name specified by the subject:organizationName field is "unique" in the entire country/jurisdiction. Those centralized registry databases are QGIS(Qualified Government Information Source, ) or QTIS(Qualified Government Tax Information Source) , and government law keep the organizations’ names are unique. <span style='color:blue'>[Note 1]<o:p></o:p></span></span></p><p class=MsoPlainText><span lang=EN-US>(3).In EU, "We found it is not suitable to enforce the CA to insert locality(L) or stateOrProvinceName(ST) into the subject DN in small country" remains still open as it is the same in other EU countries too. Please see <a href="https://portal.etsi.org/TBSiteMap/ESI/ESIActivities.aspx">https://portal.etsi.org//TBSiteMap/ESI/ESIActivities.aspx</a> <o:p></o:p></span></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif";color:windowtext'>a. ETSI EN 319 412-1 "Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 1: Overview and common data structures".<o:p></o:p></span></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif";color:windowtext'>b. ETSI EN 319 412-3 "Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons".<o:p></o:p></span></p><p><span lang=EN-US style='font-family:"Calibri","sans-serif";color:windowtext'>C.319 412-4 v1.1.1: Certificate profile for web site certificates issued to organisations<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The minimal set of Subject info for legal person in Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>4.2.1 Subject<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The subject field shall include at least the following attributes as specified in Recommendation ITU-T X.520 [1]:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"新細明體","serif"'>•</span> <span lang=EN-US>countryName;<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"新細明體","serif"'>•</span><span lang=EN-US> organizationName;<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"新細明體","serif"'>•</span><span lang=EN-US> organizationIdentifier; and<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"新細明體","serif"'>•</span><span lang=EN-US> commonName.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>(4) There will be the possibilities of Distinguished Name collisions for different entities following current BR.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Table: Proposed versions: <o:p></o:p></span></p><table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 style='border-collapse:collapse;border:none'><tr><td width=279 valign=top style='width:209.05pt;border:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal><span lang=EN-US>SSL BR V1.3.4 </span><span lang=EN-US><o:p></o:p></span></p></td><td width=279 valign=top style='width:209.05pt;border:solid windowtext 1.0pt;border-left:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal><span lang=EN-US>Proposed versions</span><span lang=EN-US><o:p></o:p></span></p></td></tr><tr><td width=279 rowspan=4 valign=top style='width:209.05pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal><span lang=EN-US>7.1.4.2.2 Subject Distinguished Name Fields</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>d. Certificate Field: </span></b><span lang=EN-US>subject:localityName (OID: 2.5.4.7) <o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Required</span></b><span lang=EN-US> if the subject:organizationName field is present and the subject:stateOrProvinceName field is absent.<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Optional</span></b><span lang=EN-US> if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present.<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria-Bold","serif"'>e. Certificate Field: </span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria","serif"'>subject:stateOrProvinceName (OID: 2.5.4.8)<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria-Bold","serif"'>Required </span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria","serif"'>if the subject:organizationName field is present and subject:localityName field is absent.<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria-Bold","serif"'>Optional </span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria","serif"'>if subject:organizationName and subject:localityName fields are present.</span><span lang=EN-US><o:p></o:p></span></p></td><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l1 level1 lfo1'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>Dr. Ben Wilson of DigiCert’s version<o:p></o:p></span></p></td></tr><tr><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal><span lang=EN-US>7.1.4.2.2 Subject Distinguished Name Fields</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>d.Certificate Field:</span></b><span lang=EN-US> subject:localityName (OID: 2.5.4.7) <o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Required</span></b><span lang=EN-US> if the subject:organizationName field is present and the subject:stateOrProvinceName field is absent.<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Optional </span></b><span lang=EN-US>if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present<span style='color:blue'>, or (b) if the country name provided under subsection g. is Taiwan (TW), Singapore (SG)[Note 2], etc..</span><o:p></o:p></span></p><p class=MsoPlainText style='margin-left:30.0pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US>e.Certificate Field:</span></b><span lang=EN-US> subject:stateOrProvinceName (OID: 2.5.4.8) </span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Required if the subject:organizationName field is present and subject:localityName field is absent.<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Optional </span></b><span lang=EN-US>if: (a) subject:organizationName and subject:localityName fields are present, <span style='color:blue'>or (b) if the country name provided under subsection g. is Taiwan (TW), Singapore (SG), etc..</span></span><span lang=EN-US><o:p></o:p></span></p></td></tr><tr><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l1 level1 lfo1'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>Dr. Wen-Cheng Wang of Chunghwa Telecom’s Version<o:p></o:p></span></p></td></tr><tr><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal><span lang=EN-US>7.1.4.2.2 Subject Distinguished Name Fields</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoPlainText style='margin-left:30.0pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><b><span lang=EN-US>d. Certificate Field</span></b><span lang=EN-US>: subject:localityName (OID: 2.5.4.7) <o:p></o:p></span></p><p class=MsoPlainText><b><span lang=EN-US>Required </span></b><span lang=EN-US>if the subject:organizationName field is present and the subject:stateOrProvinceName field is absent.<o:p></o:p></span></p><p class=MsoPlainText><b><span lang=EN-US>Optional </span></b><span lang=EN-US>if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present, <span style='color:blue'>or (b) if the subject:organizationName and subject:countryName fields are present and the country/jurisdiction specified by the subject:countryName field has a centralized registry for that kind of organizations so that the organization name specified by the subject:organizationName field is "unique" in the entire country/jurisdiction.<o:p></o:p></span></span></p><p class=MsoPlainText style='text-indent:12.0pt'><span lang=EN-US style='color:blue'>Normally, situation (b) may exist in small countries/jurisdictions such as Singapore (SG), Taiwan (TW), etc.<o:p></o:p></span></p><p class=MsoPlainText style='text-indent:12.0pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='text-indent:12.0pt'><b><span lang=EN-US>e. Certificate Field: </span></b><span lang=EN-US>subject:stateOrProvinceName (OID: 2.5.4.8) <o:p></o:p></span></p><p class=MsoPlainText style='text-indent:12.0pt'><b><span lang=EN-US>Required</span></b><span lang=EN-US> if the subject:organizationName field is present and subject:localityName field is absent.<o:p></o:p></span></p><p class=MsoPlainText style='text-indent:12.0pt'><b><span lang=EN-US>Optional </span></b><span lang=EN-US>if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present, <span style='color:blue'>or (b) if the subject:organizationName and subject:countryName fields are present and the country/jurisdiction specified by the subject:countryName field has a centralized registry for that kind of organizations so that the organization name specified by the subject:organizationName field is "unique" in the entire country/jurisdiction.<o:p></o:p></span></span></p><p class=MsoPlainText style='text-indent:12.0pt'><span lang=EN-US style='color:blue'>Normally, situation (b) may exist in small countries/jurisdictions such as Singapore (SG), Taiwan (TW), etc.</span><span lang=EN-US><o:p></o:p></span></p></td></tr></table><p><span lang=EN-US style='font-family:"Calibri","sans-serif";color:windowtext'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Some problems if we don’t amend SSL BR and soultions:</span></b><b><span lang=EN-US><o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l2 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>For a Symantec OV SSL Certificate that I found in </span><span lang=EN-US><a href="https://mv.vatican.va/3_EN/pages/MV_Home.html">https://mv.vatican.va/3_EN/pages/MV_Home.html</a> (with error message by browser for the FQDN in URL is not matched the Subject Alternative Name, *.catholica.va and catholica.va, in this SSL certificate)or you can see it in<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><a href="https://crt.sh/?q=98+ef+2b+4c+43+39+ae+04+3b+bd+55+08+59+b2+b7+b4+ee+76+cb+af">https://crt.sh/?q=98+ef+2b+4c+43+39+ae+04+3b+bd+55+08+59+b2+b7+b4+ee+76+cb+af</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'>Its Subject DN is <br>commonName=*.catholica.va<br>organizationName=Department of Telecommunications<br>localityName=Vatican City<br>stateOrProvinceName=Vatican City State<br>countryName =VA</span><b><span lang=EN-US><o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'>The subject DN should be <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'>commonName=*.catholica.va<br>organizationName=Department of Telecommunications<br>countryName =VA<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'>It is enough to identify the domain name owner in Vatican.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'>Note that from </span><span lang=EN-US><a href="http://www.upu.int/fileadmin/documentsFiles/activities/addressingUnit/vatEn.pdf"><span style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222;text-decoration:none'>http://www.upu.int/fileadmin/documentsFiles/activities/addressingUnit/vatEn.pdf</span></a></span><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'> given by Peter Brown of Amazon<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New","serif";color:#222222'>The Vatican uses an address format identical to that of Italy, except the province abbreviation, which is not used in the Vatican.<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l2 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>A wildcard SSL certificate signed by GlobalSign at <a href="https://ebank.cotabank.com.tw/eBank/">https://ebank.cotabank.com.tw/eBank/</a>, <o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>Its Subject DN is <o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>CN = *.cotabank.com.tw<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>O = COTA Commercial Bank<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>OU = ITDs<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>L = Taichung<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><b><span lang=EN-US style='color:red'>S = Taichung<o:p></o:p></span></b></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>C = TW<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>But there is No Taichung Province or Taichung State in Taiwan, only Taichung city in Taiwan. <o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US><br>I also mail to Doug of GlobalSign for below example, <o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>Kaohsiung city is also a special municipality as Taichung city. For a wildcard SSL Certificate for a bank as in </span><span lang=EN-US><a href="https://accessible.bok.com.tw/"><span style='color:windowtext;text-decoration:none'>https://accessible.bok.com.tw/</span></a><span style='color:blue'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>Its Subject DN is <o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-autospace:none'><span lang=EN-US style='font-size:9.0pt;font-family:"新細明體","serif"'>CN = *.bok.com.tw<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-autospace:none'><span lang=EN-US style='font-size:9.0pt;font-family:"新細明體","serif"'>O = BANK OF KAOHSIUNG CO., LTD.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-autospace:none'><span lang=EN-US style='font-size:9.0pt;font-family:"新細明體","serif"'>OU = MIS Dept.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-autospace:none'><span lang=EN-US style='font-size:9.0pt;font-family:"新細明體","serif";color:red'>L = Kaohsiung<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-autospace:none'><span lang=EN-US style='font-size:9.0pt;font-family:"新細明體","serif";color:red'>S = Taiwan<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='font-size:9.0pt;font-family:"新細明體","serif"'>C = TW</span><span lang=EN-US style='color:#1F497D'><o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-autospace:none'><span lang=EN-US style='color:#1F497D'>The rule by GlobalSign vetting team is not the same as in cotabank in Taichung city for BANK OF KAOHSIUNG CO., LTD. in Kaohsiung city.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>Please also see the Taichung City Government English webpages in <o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US><a href="http://eng.taichung.gov.tw/mp.aspx?mp=1">http://eng.taichung.gov.tw/mp.aspx?mp=1</a><span style='color:#1F497D'> and Kaohsiung City Government English webpages in<o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US><a href="http://www.kcg.gov.tw/EN/Index.aspx">http://www.kcg.gov.tw/EN/Index.aspx</a><span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>These two city governments called them “City” not province. They are </span><span lang=EN-US style='color:blue'>special municipalities, it is no need to put S=Taiwan. </span><span lang=EN-US style='color:#1F497D'><o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>We think below DN should be suitable:<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>CN = *.cotabank.com.tw<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>O = COTA Commercial Bank<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>OU = ITDs<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>C = TW<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>CN = *.bok.com.tw<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>O = BANK OF KAOHSIUNG CO., LTD.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>OU = MIS Dept.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:blue'>C = TW<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span class=shorttext><span lang=EN style='font-family:"Arial","sans-serif";color:#222222'>They can be simple and clear identify *.bok.com.tw’ and COTA Commercial Bank’s organization DNs follow our country’s law and x.520. </span></span><span lang=EN-US style='color:#1F497D'><o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l2 level1 lfo2'><![if !supportLists]><span lang=EN-US style='color:#1F497D'><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US style='color:#1F497D'>Another case is as </span><span lang=EN-US><a href="https://www.ecover.com.tw/">https://www.ecover.com.tw/</a><span style='color:#1F497D'> issued by Comodo, <o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>CN = </span><span lang=EN-US><a href="http://www.ecover.com.tw">www.ecover.com.tw</a><span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = GlobalTrustSSLPro<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = Provided by Global Digital Inc.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = MIS Dept<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>O = SOUTH CHINA INSURANCE CO., LTD.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>STREET = 5F,No.560,Sec. 4,Chung Hsiao E Rd.,Taipei,Taiwan<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>L = Taipei<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:red'>S = Taiwan<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>PostalCode = 110<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>C = TW<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-indent:18.0pt'><span lang=EN-US style='color:#1F497D'>As Taipei City is a Municipality, we should not put S=Taiwan. Also for its address, you can see other example such as </span><span lang=EN-US><a href="http://www.tcc.gov.tw/en/cp.aspx?n=BBF5C83DDCCEE939">http://www.tcc.gov.tw/en/cp.aspx?n=BBF5C83DDCCEE939</a><span style='color:#1F497D'> of Taipei City Council:<o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='font-size:8.5pt;font-family:"微軟正黑體","sans-serif";color:#333333'>Copyright ©2013 Taipei City Council <br>No.507, Sec. 4, Ren-ai Rd., Xinyi Dist., Taipei City 110, Taiwan (R.O.C.)<br></span><span lang=EN-US><a href="TEL:(02)2729-7708"><span style='font-size:8.5pt;font-family:"微軟正黑體","sans-serif"'>TEL:(02)2729-7708</span></a></span><span lang=EN-US style='font-size:8.5pt;font-family:"微軟正黑體","sans-serif";color:#333333'><br>Last Updated: 2016-05-16</span><span lang=EN-US style='color:#1F497D'><o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>No need to put Taiwan Province.<o:p></o:p></span></p><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='color:#1F497D'>The DN follows the Taiwan’s company act and current BR should be<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>CN = </span><span lang=EN-US><a href="http://www.ecover.com.tw">www.ecover.com.tw</a><span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = GlobalTrustSSLPro<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = Provided by Global Digital Inc.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = MIS Dept<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>O = SOUTH CHINA INSURANCE CO., LTD.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>STREET = 5F,No.560,Sec. 4,Chung Hsiao E Rd., Taipei City ,Taiwan<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>L = Taipei</span><span lang=EN-US style='color:blue'> </span><span lang=EN-US style='color:red'>City</span><span lang=EN-US style='color:#1F497D'><o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>PostalCode = 110<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>C = TW<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd;text-indent:6.0pt'><span lang=EN-US style='color:#1F497D'>But it may misinterpretate SOUTH CHINA INSURANCE CO., LTD as registered in Taipei City. So we suggest to modify SSL BR and use below DN<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>CN = </span><span lang=EN-US><a href="http://www.ecover.com.tw">www.ecover.com.tw</a><span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = GlobalTrustSSLPro<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = Provided by Global Digital Inc.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>OU = MIS Dept<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>O = SOUTH CHINA INSURANCE CO., LTD.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>STREET = 5F,No.560,Sec. 4,Chung Hsiao E Rd., Taipei City ,Taiwan<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>PostalCode = 110<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'>C = TW<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US>Because from Note1,<span style='color:#1F497D'> </span>according Taiwan’s Company Act,<span style='color:#1F497D'> </span>the company name must be unique for the whole country. So we can omit the L = Taipei City. Also Taipei City appears in the Street field.<span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt;text-indent:-18.0pt;mso-list:l2 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>4.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>On the other hand, in Taiwan, we have small businesses (such as stores, or as Business Entities as in EVGL) which is established and registered according to our Business Registration Act(<a href="http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080004">http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080004</a>, See Article 28). In Taiwan, small businesses is registered in municipal level. The Business Registration Law requires that the name of the small business must be unique with the municipality (that will be a city or a county) where it is registered.<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>For example, there might be a small business named "ABC Store" registered in Taipei City, while there might be another "ABC Store" registered in NantouCounty. <o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>Therefore, the suitable subject DN for these two small businesses will be </span><span lang=EN-US style='font-family:"Courier New","serif"'>“</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>CN=ABC Store’s FQDN <o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>O=ABC Store<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>L=Taipei City <o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>C=TW<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>and<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>CN=ABC Store’s FQDN<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US>O=ABC Store<o:p></o:p></span></p><p class=MsoPlainText style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:18.0pt'><span lang=EN-US>L=Nantou County<o:p></o:p></span></p><p class=MsoPlainText style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:18.0pt'><span lang=EN-US>C=TW<o:p></o:p></span></p><p class=MsoPlainText style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:18.0pt'><span lang=EN-US>respectively.<o:p></o:p></span></p><p class=MsoPlainText style='margin-left:18.0pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:18.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoPlainText><b><span lang=EN-US>5.</span></b><span lang=EN-US> <u><span style='color:blue'>In X.520 or within a CA, A CA has to let different entities to have different Distinguished Name, different serial numbers and different key pairs. It is fundamental.</span></u> For IV SSL certificate or citizen certificates, we can add unique serial number in Subject Distinguished Names to two different entities have the same names. (Peter Brown of Amazon in the discussion said EV SSL certificates solve the problem, but don</span><span lang=EN-US style='font-family:"Courier New","serif"'>’</span><span lang=EN-US>t forget that <u><span style='color:blue'>EV SSL Certificates will not be issued to individuals</span></u>, only be issued to Private Organization, Government Entities, Business entities and non-profit international organizations.) <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>For OV SSL certificates, we have explained that there are some other small countries or jurisdictions where stateOrProvinceName is not available and where companies is registered in the country level. <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>In such situations, we do not think it is suitable to enforce the CA to insert locality(L) or stateOrProvinceName(ST) into the subject DN. <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='color:#1F497D'>Peter tended to interpret the current BR that the localityName and stateOrProvinceName attributes as identifying the subject’s address of existence or operation. However, to enforce this kind of interpretation and require the Subject DN must at least contain either the localityName and stateOrProvinceName attributes may cause problem in some situations as Dr. Wen-Cheng Wang’s email before, especially in some small country where organizations are allowed to be registered at country-level. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='color:#1F497D'>For example, in Taiwan, a corporation can be registered at country-level but can also be register at city/county-level. If there is a country-level corporation named “Farmer’s Association” of which physical address is located in Taipei City, with current Subject DN rule of BR, its Subject DN will be “C=TW, L=Taipei City, O=Farmer’s Association”. However, if there is also a city/county-level “Farmer’s Association” in Taipei City, its Subject DN will also be “C=TW, L=Taipei City, O=Farmer’s Association”. How do you distinguish them by DN?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>We do not understand why we need to enforce require the Subject DN must at least contain either the localityName and stateOrProvinceName attributes if the registered organizational name of a country-level corporation/organization is already guaranteed to be unique under the country name?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>The following diagram is taken from Annex B of ITU-T X.521 (Suggested name form and Directory information tree structures). Please note path 1 -> 3, it suggests that there is no need to include a Locality attribute in the directory name of a country-level organization.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><span style='color:#1F497D'><img border=0 width=575 height=472 id="_x0000_i1025" src="cid:image001.jpg@01D1DDF8.08A56520"></span><span style='color:#1F497D'><o:p></o:p></span></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoPlainText><span lang=EN-US>Several CAs have issued certificates with countryName = TW where other subject attributes are incorrectly set. That</span><span lang=EN-US style='font-family:"Courier New","serif"'>’</span><span lang=EN-US>s because those CA don’t not consider the real situation, so they try to fill some attributes to fill the state=Taiwan or even state=Taichung.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Other Q & A<o:p></o:p></span></b></p><p class=MsoPlainText style='margin-left:48.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo3'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>In Bugzilla(</span><span lang=EN-US>CABF Bugzilla </span><span style='font-family:"新細明體","serif"'>–</span><span lang=EN-US> Bug#2 </span><span lang=EN-US><a href="https://bugzilla.cabforum.org/show_bug.cgi?id=2">https://bugzilla.cabforum.org/show_bug.cgi?id=2</a></span><span lang=EN-US>) </span><span lang=EN-US>, Dimitris Zacharopoulos suggested that <o:p></o:p></span></p><p class=MsoPlainText style='margin-left:30.0pt'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='margin-left:30.0pt'><span lang=EN-US style='color:#4F81BD'>There are some countries that have a centralized registry for commercial companies which means that company names are "unique" in the entire country. <o:p></o:p></span></p><p class=MsoPlainText style='margin-left:30.0pt'><span lang=EN-US style='color:#4F81BD'><o:p> </o:p></span></p><p class=MsoPlainText style='margin-left:30.0pt'><span lang=EN-US style='color:#4F81BD'>The BR could address this issue in Section 7.1.4.2.2d/e and provide an exception for these cases. However, the CA's qualified auditors should verify that there is a single company naming registry in the entire country which forces uniqueness of company names. The Root programs could request a letter from the CA's auditors to verify this situation that would enable the exception.<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoNormal style='text-indent:30.0pt'><span lang=EN-US style='color:#4F81BD'>Ans: I think the CA's qualified auditors will be glad to verify that there is a single company naming registry in the entire country which forces uniqueness of company names and offer the letter under request of Browser Root Certificate Program. Also I have showed the URL of Taiwan’s company act. Taiwan’s National Development Council asked Government PKI’s qualified auditors to join the F2F Meeting 39 in Redmond. Li-Chun CHEN has helped David of KPMG, Taiwan to join.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#4F81BD'>Below is website of Company Registration Database:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><a href="http://gcis.nat.gov.tw/mainNew/classNAction.do?method=list&pkGcisClassN=4,website"><span style='color:#4F81BD;text-decoration:none'>http://gcis.nat.gov.tw/mainNew/classNAction.do?method=list&pkGcisClassN=4,website</span></a><span style='color:#4F81BD'> of Importer registration system:https://fbfh.trade.gov.tw/rich/text/indexfbOL.asp<o:p></o:p></span></span></p><p class=MsoNormal><span lang=EN-US style='color:#4F81BD'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:48.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l0 level1 lfo3'><![if !supportLists]><span lang=EN-US style='color:#4F81BD'><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US style='color:#4F81BD'>In CA/B Forum meeting of July 7th, Kirk asked if a general rule can be written rather than writing up a list of specific countries. Ben said that had not been discussed. <o:p></o:p></span></p><p class=MsoNormal style='text-indent:24.0pt'><span lang=EN-US style='color:#4F81BD'>Ans: What about discussion like </span><span lang=EN-US>the minimal set of Subject info for legal person in Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons? Or choose the edition from Ben or Wen-Cheng.</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:48.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#4F81BD'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:48.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l0 level1 lfo3'><![if !supportLists]><span lang=EN-US style='color:#4F81BD'><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US style='color:#4F81BD'>In certificate Policy working Group, Ben offer discussion records between Peter Brown and Li-Chun CHEN as <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#4F81BD'> </span><span lang=EN-US><a href="https://www.mail-archive.com/public@cabforum.org/msg01333.html">https://www.mail-archive.com/public@cabforum.org/msg01333.html</a><span style='color:#4F81BD'><o:p></o:p></span></span></p><p class=MsoNormal><span lang=EN-US style='color:#4F81BD'><o:p> </o:p></span></p><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> Note that in RFC 3739 there are Qualified Certificates Profiles, In section </span><span lang=EN-US>2.4. Uniqueness of names:<o:p></o:p></span></pre><pre><span lang=EN-US><o:p> </o:p></span></pre><pre><span lang=EN-US> Distinguished name is originally defined in X.501 [X.501] as a<o:p></o:p></span></pre><pre><span lang=EN-US> representation of a directory name, defined as a construct that<o:p></o:p></span></pre><pre><span lang=EN-US> identifies a particular object from among a set of all objects. The<o:p></o:p></span></pre><pre><span lang=EN-US> distinguished name MUST be unique for each subject entity certified<o:p></o:p></span></pre><pre><span lang=EN-US> by the one CA as defined by the issuer name field, for the whole life<o:p></o:p></span></pre><pre><span lang=EN-US> time of the CA.</span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'><o:p></o:p></span></pre><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'><o:p> </o:p></span></pre><pre style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>For Taiwan’s Government PKI, there is a certificate and CRL profile as<o:p></o:p></span></pre><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>http://grca.nat.gov.tw/download/GPKI_Cert_and_CRL_Profiles_v2.0.pdf, we have this document around 14 years. Only that it is written in Tradition Chinese, not English. So we don’t think there are some issues that Peter said, like </span>“<span lang=EN-US>For end-entity certificates in the WebPKI, as implemented, there is no requirement that different entities have different Subject values.</span>”<span lang=EN-US><o:p></o:p></span></pre><p><span lang=EN-US style='color:blue'><o:p> </o:p></span></p><p class=MsoListParagraph style='margin-left:48.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l0 level1 lfo3'><![if !supportLists]><span lang=EN-US style='color:#1F497D;mso-fareast-language:EN-US'><span style='mso-list:Ignore'>4.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US style='color:#1F497D;mso-fareast-language:EN-US'>Doug Beattie</span><span lang=EN-US style='color:#1F497D'> said in Validation Working Group : </span><span lang=EN-US style='color:#1F497D;mso-fareast-language:EN-US'>I still think it would be a good idea to enumerate the entire list of Country codes where both stateOrProvinceName and localityName can be omitted so there is no confusion and compliance can be monitored.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:48.0pt;mso-para-margin-left:0gd;text-indent:-18.0pt;mso-list:l0 level1 lfo3'><![if !supportLists]><span lang=EN-US style='color:#1F497D;mso-fareast-language:EN-US'><span style='mso-list:Ignore'>5.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='color:#1F497D'>Ans: I list all the Country Codes as in Note 2. But we have to consider it seems that some are not ISO 3166-1 code, some is ISO 3166-2 code. The original source is from <b>https://www.drupal.org/node/636464</b>, and I check by web sites such as </span><span class=langwithname><span lang=EN>Wikipedia, those government sites, </span></span><span lang=EN style='color:#1F497D'> </span><span lang=EN-US><a href="https://en.wikipedia.org/wiki/ISO_3166">https://en.wikipedia.org/wiki/ISO_3166</a><span style='color:#1F497D'>and </span><a href="http://userpage.chemie.fu-berlin.de/diverse/doc/ISO_3166.html">http://userpage.chemie.fu-berlin.de/diverse/doc/ISO_3166.html</a>. We hope more volunteers provide comments and advices.<o:p></o:p></span></p><p class=MsoListParagraph style='margin-left:48.0pt;mso-para-margin-left:0gd'><span lang=EN-US style='color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'><o:p> </o:p></span></pre><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoPlainText style='text-indent:18.0pt'><span lang=EN-US style='color:blue'>[Note 1]:</span><span lang=EN-US> In Taiwan, according our Company Act, the company name must be unique for the whole country. Furthermore, Taiwan’s Company Act requires the company to register its business location which will be some city or county. <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>In <a href="http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080001">http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080001</a>, <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Company Act article 18 , <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:red'>No company may use a corporate name which is identical with that of another company. Where the corporate names of two companies contain any marks or identifying words respectively that may distinguish the different categories of business of the two companies, such corporate names shall not be considered identical with each other.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:red'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='color:#1F497D'>A company may conduct any business that is not prohibited or restricted by the laws and regulations, except for those requiring special approvals which shall be explicitly described in the Articles of Incorporation of the company.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='color:#1F497D'>Any category of business to be conducted by a company shall, when making the registration thereof, be identified with the Category Code applicable to the said business category as assigned in the Table of Categories of Businesses by the central competent authority. For a company which has already been registered, and the category of business conducted by it is registered with descriptive words, then, such descriptive words shall be replaced with the applicable Category Code as assigned in the foregoing Table, while applying for alteration of the entries of existing company registration record.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='color:#1F497D'>A company shall not use a name which tends to mislead the public to associate it with the name of a government agency or a public welfare organization, or has an implication of offending against public order or good customs.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Before proceeding to the company incorporation registration procedure, a company shall first apply for approval and reservation, for a specific period of time, of its corporate name and the scope of its business. Rules for examination and approval of such application shall be prescribed by the central competent authority.<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>In Taiwan, since the company name must be unique for the whole country, the subject DN for a company, such as Chunghwa Telecom, should look like <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US>"C=TW, O=Chunghwa Telecom Co., Ltd<o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='text-indent:18.0pt'><span lang=EN-US>This subject DN already uniquely identifies the company. <o:p></o:p></span></p><p class=MsoPlainText style='text-indent:18.0pt'><span lang=EN-US>There is no necessary to add RDNs such as locality(L), or stateOrProvinceName(ST), Address (optional in BR) into the subject DN. <o:p></o:p></span></p><p class=MsoPlainText><span lang=EN-US><o:p> </o:p></span></p><p class=MsoPlainText style='margin-bottom:12.0pt;text-indent:18.0pt'><span lang=EN-US>If we specify the subject DN as "C=TW, L=Taipei City, O=Chunghwa Telecom Co., Ltd.", that will mean it is a company registered in Taipei City. This will not conform to our Company Law because companies in Taiwan is registered in the country level not in the municipal level.<o:p></o:p></span></p><p><span lang=EN-US style='color:blue'><o:p> </o:p></span></p><p><span lang=EN-US style='color:blue'>[Note 2]:</span><span lang=EN-US><o:p></o:p></span></p><p><span lang=EN-US>Table: Example of small countries/jurisdictions<o:p></o:p></span></p><table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 style='border-collapse:collapse;border:none'><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US><o:p> </o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border:solid windowtext 1.0pt;border-left:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US><a href="https://en.wiktionary.org/wiki/ISO" title=ISO><span style='color:black;text-decoration:none'>ISO</span></a> 3166 <a href="https://en.wiktionary.org/wiki/country_code" title="country code"><span style='color:black;text-decoration:none'>country code</span></a><o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US><a href="https://en.wiktionary.org/wiki/Bouvet_Island" title="Bouvet Island"><span style='color:black;text-decoration:none'>Bouvet Island</span></a><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>BV<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>British Virgin Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>VG<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Christmas Island <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>CX<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Falkland Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>FK<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Faroe Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>FO<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>French Guiana<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>GF<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Gibraltar<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US><a href="https://en.wikipedia.org/wiki/ISO_3166-2:GI" title="ISO 3166-2:GI"><span style='color:black;text-decoration:none'>GI</span></a><o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Guadeloupe<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>GP<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Guam<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>GU<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Guernsey<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>GG<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Isle of Man <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>IM<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Jersey<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>JE<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Lebanon<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>LB<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Macedonia<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>MK<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Martinique<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>MQ<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Mayotte<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>YT<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Montenegro<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>ME<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Netherlands Antilles<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>AN<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Niue<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>NU<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Norfolk Island<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>NF<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Palestinian Territory <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>PS<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Pitcairn<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>PN<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Reunion<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>RE<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Serbia<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>RS<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Singapore <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>SG<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Slovenia <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>SVN<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>South Georgia and the South Sandwich Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>GS<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Svalbard and Jan Mayen <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>SJ<b><o:p></o:p></b></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Taiwan<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>TW<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Vatican<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>VA<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>Western Sahara <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p><span lang=EN-US>EH<o:p></o:p></span></p></td></tr></table><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'>Sincerely Yours,<o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> Li-Chun CHEN<o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> Deputy Senior Engineer<o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> CISSP, CISA, CISM, PMP,<o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> Information & Communication Security Dept.<o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> Data Communication Business Group<o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> Chunghwa Telecom Co. Ltd.<o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> <a href="mailto:realsky@cht.com.tw">realsky@cht.com.tw</a><o:p></o:p></span></p><p class=MsoNormal><span lang=NO-BOK style='color:#1F497D'> +886-2-2344-4820#4025<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Ben Wilson [mailto:ben.wilson@digicert.com] <br><b>Sent:</b> Saturday, July 02, 2016 2:40 AM<br><b>To:</b> Erwann Abalea; </span><span style='font-size:10.0pt;font-family:"新細明體","serif"'>陳立群</span><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><br><b>Cc:</b> CABFPub<br><b>Subject:</b> RE: [cabfpub] EV Gudelines section 9.2.5 & X.520<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt'>To help this discussion along, here is a transcript of yesterday’s Policy Review Working Group meeting:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: I would like to address the Subject Name issue and a new issue, which is the proprietary OID of Microsoft for jurisdiction of incorporation. We feel we need to prepare a proposal to modify the EV Guidelines and allow CAs to modify their CPSs and internal programs to accommodate a non-proprietary OID. And then on the first issue, maybe we can find more examples, such as in Europe, of small countries with the subject name issue. I don’t know why browsers reject the ballot. I think that most of the CAs agree with the effort. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Peter: The EV OIDs for jurisdiction were created by Microsoft. Microsoft allocated those OIDs out of their namespace to the EV program, correct? <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: But in the EV Guidelines we said we are referencing with X.520. They are just excluding the BRs, such as country OID, state or province OID, and locality OID. The BRs are accurate. Our position is that those OIDs are not just for physical address. It’s also about jurisdiction, and X.520 is for the way we support the Distinguished Name. We cannot sort different entities with the same Distinguished Name. If you sync the register with the protocol and for the hierarchical structure. Also, for example in RFC 3739 there are Qualified Certificates Profiles. So there will be the serial number for individuals or for natural person and they can use it with an IV certificate, and also we use the serial number in the Subject Distinguished Name for our citizen certificate in Taiwan. We just need to offer to better, one is for relief the registration for subject’s state or province and the locality for small countries, as we discussed previously. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Another is the proprietary Microsoft OID. The BRs state that for the state, province and locality OID. And we will offer this in the mailing list in the future in two weeks. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Peter: You’ve raised several good topics. First, regarding what you’ve raised as the proprietary Microsoft OIDs, as I understand it, the definition of a Subject Distinguished Name is a sequence of attributes of any type. X.520 lists some attribute types, but it is not an exclusive set. Any organization can allocate new attribute types. As part of the development of the EV specification, several new attribute types were defined. This is similar to what countries do when they develop new attribute types for their certificates, which we’ve seen with things like electronic IDs in Europe, etc. I am not familiar with the Taiwanese electronic ID standard, but it may use OIDs from its arc as well. The question in the EV Guidelines that I think is confusing, which I’d like to see if we could clarify, are those OIDs from Microsoft where the content definition in them, that is the ASN.1 structure was defined as a reference to the data type that includes the phrase X.520, which is from RFC 5280. It is not a reference to X.520 itself. Instead RFC 5280 uses the term X.520 itself. So I can see how it is confusing. Erwan posted a revision to the mailing list a version that did not use that term. Did Erwan’s email make more sense? Should we propose a ballot that uses that terminology instead?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: We have seen that email, but we think it is a proprietary OID. We suggest that we use the OIDs in the Baseline Requirements and in X.520, country, state and locality. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Peter: I believe that all of the browsers have coded those other OIDs at this point. So it would not be an EV certificate and the browsers would not accept it as such without those OIDs that are underneath the Microsoft OID arc.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: We think the browsers only put those OIDs printable chain in to appear when we click on the EV certificate’s detailed information. So, those efforts will be in CAs’ program to change proprietary OID to an X.520 OID. I think they will not involve browsers. I think we can discuss this topic further on the mailing list.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Peter: Just to make sure I understand what you’re saying, your objection is to the inclusion of OIDs that are not covered in the X.520 document in the CA/B Forum standards?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: Yes, and I will discuss this with my colleagues, and I think in the EV Guidelines we say they are from X.520, so we don’t want an X.520 and RFC 5280 … There are Microsoft registered proprietary OIDs. So I think several years ago they discussed this about the EV Guidelines and they follow the TOC for Microsoft’s suggestions for OIDs and nobody cared about this, and now we find in an international environment we suggest that we not use a proprietary OID. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Peter: OK. Now I believe on the other topic of Distinguished Names, Subject Contents, you sent the diagram from the X.500 series several times … I believe it is from X.521? Your concern is that, as defined by the X.500 series, distinguished names should be part of a hierarchical tree. So the challenge is that the CA/B Forum guidelines do not follow that because it is not possible to make a reasonable hierarchical tree with the distinguished names that are specified in the guidelines. For example, the EV Guidelines require two entries that both require country names, which therefore does not follow X.520. Is that correct? <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: We want to start discussing this problem in more countries like Taiwan or Singapore and so we don’t have the state or province and we have a centralized database of government to let different companies will not have the same company’s name. We have an English version. I have referenced our Taiwan Companies Act, and there are those rules, and the Distinguished Name for the company certificate, we use either the state or province. So we suggest that we release the restrictions that we have to put the state or province for small countries. Like Ben’s suggestion, we can list those country codes that don’t require the state or province. For those companies, their distinguished name can just be, for example, C=TW, O=Chunghwa Telecom, and we need not put in L=Taipei City. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Peter: Li-Chun, are you using a standard in Taiwan, or is there something that your CA complies with, where you use the Distinguished Name that is present in your certificates in another context? <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: We have a commercial CA and a government CA, and for those CAs with the Distinguished Name we can distinguish in the whole country the jurisdiction. We don’t need to put in a locality because of the X.520 hierarchy structure. And we can distinguish the company and we can guarantee that they will not have the same name. So we will not put in the locality. I reference that in the email.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Peter: So, what if all of the web browsers said, “we don’t care about X.520 and the hierarchy. That is, we’re using X.509-formatted certificates, but the intent is not to follow the strict, direct hierarchy that is called out in some of the other standards”? Does that conflict with other things that you are required to follow?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Li-Chun: If for some reason you say you didn’t want to follow X.520, but in the EV Guidelines you say you follow X.520, I see in RFC 5280, and Baseline Requirements, and the EV Guidelines all say we follow the X.520 standard. I don’t know why other CA/Browser Forum members would not want to follow. Where we identify the subject’s identity, we first have to check with the government so that we will know it. You have to consider the small country’s situation. In America you have so many states, and you can use those to distinguish the English name, but in our country, we rely on the X.520 data. I think it is fundamental for each CA to distinguish their own subscribers’ identities. We have to keep them distinguished if they have a different public key, a different subject distinguished name, and a different serial number. We have to vet them to prevent a collision problem. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><a name="_MailEndCompose"><span lang=EN-US style='font-size:11.0pt'><o:p> </o:p></span></a></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt'>From:</span></b><span lang=EN-US style='font-size:11.0pt'> <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] <b>On Behalf Of </b>Erwann Abalea<br><b>Sent:</b> Wednesday, June 29, 2016 10:02 AM<br><b>To:</b> </span><span style='font-size:11.0pt;font-family:"MS Gothic"'>陳立群</span><span lang=EN-US style='font-size:11.0pt'> <<a href="mailto:realsky@cht.com.tw">realsky@cht.com.tw</a>><br><b>Cc:</b> CABFPub <<a href="mailto:public@cabforum.org">public@cabforum.org</a>><br><b>Subject:</b> Re: [cabfpub] EV Gudelines section 9.2.5 & X.520<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Bonjour, <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>I haven’t seen an authoritative definition of these 3 attributes, but always considered them the way Peter described them.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Maybe Microsoft should propose a clear definition, using the syntax from RFC5912, something like this:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><span lang=EN-US>id-MS-jurisdictionLocalityName OBJECT IDENTIFIER ::= { 1 3 6 1 4 1 311 60 2 1 1 }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>id-MS-jurisdictionStateOrProvinceName OBJECT IDENTIFIER ::= { 1 3 6 1 4 1 311 60 2 1 2 }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>id-MS-jurisdictionCountryName OBJECT IDENTIFIER ::= { 1 3 6 1 4 1 311 60 2 1 3 }<o:p></o:p></span></p></div></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><span lang=EN-US>at-jurisdictionCountryName ATTRIBUTE ::= {<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> TYPE PrintableString (SIZE (2))<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> IDENTIFIED BY id-MS-jurisdictionCountryName<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>}<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>at-jurisdictionStateOrProvinceName ATTRIBUTE ::= {<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> TYPE DirectoryString {ub-state-name}<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> IDENTIFIED BY id-MS-jurisdictionStateOrProvinceName<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>}<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>at-jurisdictionLocalityName ATTRIBUTE ::= {<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> TYPE DirectoryString {ub-locality-name}<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> IDENTIFIED BY id-MS-jurisdictionLocalityName<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>}<o:p></o:p></span></p></div></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>DirectoryString is also redefined in RFC5912 to have a size constraint.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><div><div><p class=MsoNormal><span lang=EN-US>Cordialement,<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Erwann Abalea<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span lang=EN-US>Le 29 juin 2016 à 17:08, </span><span style='font-family:"MS Gothic"'>陳立群</span><span lang=EN-US> <<a href="mailto:realsky@cht.com.tw">realsky@cht.com.tw</a>> a écrit :<o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> In X.520 as attached file or RFC 5280(<a href="https://tools.ietf.org/html/rfc5280">https://tools.ietf.org/html/rfc5280</a>) , There are no jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1), <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2), jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3). You can use search function to search attached PDF file. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><p class=MsoPlainText style='text-indent:12.0pt'><span lang=EN-US>These three OIDs are registered by Microsoft. Please see <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.1.html">http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.1.html</a>, <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.2.html">http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.2.html</a> and <a href="http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.3.html">http://www.alvestrand.no/objectid/1.3.6.1.4.1.311.60.2.1.3.html</a> <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> Peter referenced EV GL 9.2.5 such as <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Naming attributes of type X520LocalityName<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>id-at-localityName AttributeType ::= { id-at 7 }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> that id is 2.5.4. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> But Country Name (2.5.4.6), State or Province Name (2.5.4.8) and Locality Name (2.5.4.7) are appeared in X.520. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><p class=MsoPlainText style='text-indent:42.0pt'><span lang=EN-US>Li-Chun CHEN<o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><table class=MsoNormalTable border=0 cellspacing=5 cellpadding=0><tr><td style='padding:.75pt .75pt .75pt .75pt'><p class=line862 style='text-indent:6.0pt'><span lang=EN-US style='font-family:"Times New Roman","serif"'> </span><span lang=EN-US><o:p></o:p></span></p></td></tr></table><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-----Original Message-----<br>From: <a href="mailto:public-bounces@cabforum.org">public-bounces@cabforum.org</a> [<a href="mailto:public-bounces@cabforum.org">mailto:public-bounces@cabforum.org</a>] On Behalf Of Peter Bowen<br>Sent: Friday, June 17, 2016 4:52 AM<br>To: CABFPub<br>Subject: [cabfpub] EV Gudelines section 9.2.5 & X.520<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>On today</span><span lang=EN-US style='font-family:"Courier New","serif"'>’</span><span lang=EN-US>s validation working group call, there was a question about how X.520 related to the attributes defined in section 9.2.5 of the EV Guidelines.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>This section says:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>"Locality (if required):<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>subject:jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1) <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>ASN.1 - X520LocalityName as specified in RFC 5280<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>State or province (if required):<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>subject:jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2)<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>ASN.1 - X520StateOrProvinceName as specified in RFC 5280 <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Country:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>subject:jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3) <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>ASN.1 </span><span lang=EN-US style='font-family:"Courier New","serif"'>–</span><span lang=EN-US> X520countryName as specified in RFC 5280"<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>The ASN.1 definitions all reference RFC 5280 and are defined in Appendix A. They are copied at the end of this email. RFC 5280 also says " The DirectoryString type is defined as a choice of PrintableString, TeletexString, BMPString, UTF8String, and UniversalString. CAs conforming to this profile MUST use either the PrintableString or UTF8String encoding of DirectoryString</span><span lang=EN-US style='font-family:"Courier New","serif"'>”</span><span lang=EN-US><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Taken together, this means:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>jurisdictionCountryName (OID: 1.3.6.1.4.1.311.60.2.1.3) must be a PrintableString with two characters which together are a </span><span lang=EN-US style='font-family:"Courier New","serif"'>“</span><span lang=EN-US>alpha 2</span><span lang=EN-US style='font-family:"Courier New","serif"'>”</span><span lang=EN-US> code defined in ISO 3166 Part 1.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>jurisdictionStateOrProvinceName (OID: 1.3.6.1.4.1.311.60.2.1.2), if included, should be either a PrintableString or UTF8String and must contain at least 1 and not more than 128 characters.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>jurisdictionLocalityName (OID: 1.3.6.1.4.1.311.60.2.1.1), if included, shoud be either a PrintableString or UTF8String and must contain at least 1 and not more than 128 characters.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>The appropriate values for these attributes, and when one needs to include the the latter two, is defined in section 9.2.5 as well.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Does this help clarify how these attributes work?<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Thanks,<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Peter<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Naming attributes of type X520LocalityName<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>id-at-localityName AttributeType ::= { id-at 7 }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Naming attributes of type X520LocalityName:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- X520LocalityName ::= DirectoryName (SIZE (1..ub-locality-name))<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>--<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Expanded to avoid parameterized type:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>X520LocalityName ::= CHOICE {<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> teletexString TeletexString (SIZE (1..ub-locality-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> printableString PrintableString (SIZE (1..ub-locality-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> universalString UniversalString (SIZE (1..ub-locality-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> utf8String UTF8String (SIZE (1..ub-locality-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> bmpString BMPString (SIZE (1..ub-locality-name)) }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Naming attributes of type X520StateOrProvinceName<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>id-at-stateOrProvinceName AttributeType ::= { id-at 8 }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Naming attributes of type X520StateOrProvinceName:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- X520StateOrProvinceName ::= DirectoryName (SIZE (1..ub-state-name))<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>--<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Expanded to avoid parameterized type:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>X520StateOrProvinceName ::= CHOICE {<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> teletexString TeletexString (SIZE (1..ub-state-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> printableString PrintableString (SIZE (1..ub-state-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> universalString UniversalString (SIZE (1..ub-state-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> utf8String UTF8String (SIZE (1..ub-state-name)),<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> bmpString BMPString (SIZE (1..ub-state-name)) }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Naming attributes of type X520countryName (digraph from IS 3166)<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>id-at-countryName AttributeType ::= { id-at 6 }<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>X520countryName ::= PrintableString (SIZE (2))<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>-- Upper Bounds<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>ub-locality-name INTEGER ::= 128<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>ub-state-name INTEGER ::= 128<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>_______________________________________________<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Public mailing list<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><a href="mailto:Public@cabforum.org"><span style='color:windowtext;text-decoration:none'>Public@cabforum.org</span></a><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><a href="https://cabforum.org/mailman/listinfo/public"><span style='color:windowtext;text-decoration:none'>https://cabforum.org/mailman/listinfo/public</span></a><o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><div><div><p class=MsoNormal><span style='font-family:"MS Gothic"'>本信件可能包含中華電信股份有限公司機密資訊</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>,</span><span style='font-family:"MS Gothic"'>非指定之收件者</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>,</span><span style='font-family:"MS Gothic"'>請勿蒐集、處理或利用本信件</span><span style='font-family:SimSun'>內容</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>,</span><span style='font-family:"MS Gothic"'>並請銷毀此信件</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>. </span><span style='font-family:"MS Gothic"'>如為指定收件者</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>,</span><span style='font-family:"MS Gothic"'>應確實保護郵件中本公司之營業機密及個人資料</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>,</span><span style='font-family:"MS Gothic"'>不得任意傳佈或揭露</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>,</span><span style='font-family:"MS Gothic"'>並應自行確認本郵件之附檔與超連結之安全性</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>,</span><span style='font-family:"MS Gothic"'>以共同善盡資訊安全與個資保護責任</span><span lang=EN-US style='font-family:"Times New Roman","serif"'>. <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'>Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.<o:p></o:p></span></p></div></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'><T-REC-X.520-201210-I!!PDF-E.pdf>_______________________________________________<br>Public mailing list<br><a href="mailto:Public@cabforum.org">Public@cabforum.org</a><br><a href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a><o:p></o:p></span></p></div></blockquote></div><p class=MsoNormal><span lang=EN-US style='font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div></div></body></html><br><html><div><div>本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任. </div><div>Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.</div></div><div><br></div><div><br></div></html>