<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:新細明體;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:細明體;
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:細明體;
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:微軟正黑體;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@微軟正黑體";
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@細明體";
panose-1:2 2 5 9 0 0 0 0 0 0;}
@font-face
{font-family:"\@新細明體";
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"新細明體","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"純文字 字元";
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"新細明體","serif";}
pre
{mso-style-priority:99;
mso-style-link:"HTML 預設格式 字元";
margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:細明體;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.shorttext
{mso-style-name:shorttext;}
span.a
{mso-style-name:"純文字 字元";
mso-style-priority:99;
mso-style-link:純文字;
font-family:細明體;}
span.HTML
{mso-style-name:"HTML 預設格式 字元";
mso-style-priority:99;
mso-style-link:"HTML 預設格式";
font-family:"Courier New";}
span.langwithname
{mso-style-name:langwithname;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1328050756;
mso-list-template-ids:-516373544;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-TW link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Hi, Erwann,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> In page 12 , I have said some of Note 2 table are not ISO 3166-1 code, some is ISO 3166-2 code. The original source is from </span><b><span lang=EN-US style='color:#1F497D'>https://www.drupal.org/node/636464</span></b><span lang=EN-US style='color:#1F497D'>, and I check by web sites such as </span><span class=langwithname><span lang=EN>Wikipedia, those government sites, </span></span><span lang=EN style='color:#1F497D'> </span><span lang=EN-US><a href="https://en.wikipedia.org/wiki/ISO_3166">https://en.wikipedia.org/wiki/ISO_3166</a><span style='color:#1F497D'>and </span><a href="http://userpage.chemie.fu-berlin.de/diverse/doc/ISO_3166.html">http://userpage.chemie.fu-berlin.de/diverse/doc/ISO_3166.html</a>. We hope more volunteers provide comments and advices.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> In last Friday CP WG meeting, I told the attenders that </span><b><span lang=EN-US style='color:#1F497D'><a href="https://www.drupal.org/node/636464">https://www.drupal.org/node/636464</a> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>first appeared in 33th F2F meeting of my presentation of page 2: <a href="https://cabforum.org/wp-content/uploads/Suggestions-to-Correct-Documents.pdf">https://cabforum.org/wp-content/uploads/Suggestions-to-Correct-Documents.pdf</a>. (Thanks for Ben has put the issue in </span><span lang=EN-US>CABF Bugzilla </span>–<span lang=EN-US> Bug#2 </span><span lang=EN-US><a href="https://bugzilla.cabforum.org/show_bug.cgi?id=2">https://bugzilla.cabforum.org/show_bug.cgi?id=2</a> in 2014</span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> ) <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> Also, in the meeting, I told the attenders that SI, not SVN, should be corrected. Thanks for your correction, too.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> Thanks for your comments about Note 2 table. I think later, we will discuss your e-mail further. <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='text-indent:24.0pt;text-autospace:none'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>I post Ben’s Notes from 2016-July-14 Policy Review Working Group call as below, I think it will help those interested in the topic help the discussion move forward:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>Present: Tim H., Dean, Ben, Robin, Dimitris, Li-Chun, Peter<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>The working group discussed the city-state issue with small countries raised by Li-Chun. The issue is, what is the exact language we want to use if we want to amend section 7.1.4.2.2, subject distinguished name fields … if the organization name and state or province fields are present, or if the country name provided under this subsection, is TW (Taiwan) is present, then it's optional. The main argument here is that the namespace is defined with a registry in the country. The issue is what is the specific language that would be in the Baseline Requirements? Would we make an assessment and determine which country names to add, and if there are additional names after we do an initial list how would that be managed? It might be better if we can enumerate those countries like TW and SG. Another proposal was to ask whether the country had a registry, but that would apply to every country and be difficult to interpret and apply. Under that second proposal, if a name is unique in the entire country, e.g. in Greece, then the subject name could be said to be unique. This might be similar for big organizations in the US that are known nationwide or that are chartered at the national level. But we’re not dealing with EV jurisdictions of formation, so we need to address this primarily from a Baseline Requirements perspective. (For EV Certs there are two parts of the certificate that you can identify- the jurisdiction of incorporation and the physical location.) <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>For OV certificates, is the basis the location or is it in order to provide a unique namespace? It was generally agreed that it wasn’t for a unique namespace but for geographic locations. The geographic location is very simple and easier to address. Then, do we enumerate the countries instead of you opening it up for some kind of definition - if you do, you get back to the namespace thing. Do we put a list of countries in a table in an appendix? <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>But, if it is based on the location of the organization, then is it like sending a postal letter? Addressing something to 15 Main St., Singapore, might be ambiguous. If you take the Vatican example, in true city-states, for the Vatican and Singapore under the UPU - Universal Postal Union they are duplicated - there is nothing under the country level. This isn’t true for larger countries that have political subdivisions. Taiwan has political subdivisions. Then, if you look at some islands, you may have no political subdivisions, or they may be protectorates of larger countries. If you take the island of Nevis in the Caribbean, for example, you could probably send something to Mrs. Jane Smith and it would get there. There aren’t enough people for name collisions.<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>Can we point to some possible authority rather than create and maintain an enumerated list? The UPU guidance may not be useful. Maybe we develop a model that is as close to the postal model as possible? Could we point to somewhere online even if it is not 100% accurate? We could take a minimalist approach and just ask whether it sufficiently provides the physical location. It would be good to have a uniform approach across all CAs. There is a list attached to Li-Chun’s email that lists small countries with their 3166 abbreviations. <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>We need to pick a middle ground with our approach here, which means we’ll likely have to maintain a list using the requests of parties wanting jurisdictions added to the list. We should add to the list those that are very certain and then leave others to add exceptions based on evidence as needed. Li-Chun has already provided his justification for Taiwan. Because we can’t come up with a rule, we’ll just have to do this on an ad-hoc basis. <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>Ben and Robin volunteered to work on a draft and to put something down on paper. The results of the call will be sent to the Policy Working Group email list, and that should help us move forward, too. <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'>Sincerely Yours,<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><span lang=EN-US style='font-family:"Arial","sans-serif";color:black'> Li-Chun CHEN<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Erwann Abalea [mailto:Erwann.Abalea@docusign.com] <br><b>Sent:</b> Saturday, July 16, 2016 2:25 AM<br><b>To:</b> </span><span style='font-size:10.0pt'>陳立群</span><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><br><b>Cc:</b> Ben Wilson; CABFPub<br><b>Subject:</b> Re: [cabfpub] Suggestion to amend BR Section7.1.4.2.2d/e RE: EV Gudelines section 9.2.5 & X.520<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Bonjour Li-Chun, <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>That’s a long email. To avoid make it even longer, I propose to split it in several parts; that should help keep a manageable size.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>I’ll start with the end, because why not?<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>You want to have special rules for small countries where ST or L is not available, and provide a list of such small countries in Note 2.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>That’s in fact a list of ISO3166-1 codes. Not all of them are actual country codes (ISO3166-1 lists country and territories) and are suitable for use in DV/OV/EV certificates (see the definition of an acceptable country code in the BR).<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Among them:<o:p></o:p></span></p></div><div><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US><o:p> </o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>GF, GP, MQ, YT, RE are regions and departments of France (C=FR, and you can put their name into the stateOrProvinceName attribute), and they are even composed of cities (we have 6 administrative subdivision levels in France, with more than 36000 cities, we’re crazy)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>BV and SJ belong to Norway (C=NO), you can certainly put their name into the stateOrProvinceName attribute<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>FK, GI, GS, PN, VG are British Overseas Territories (some are disputed either by Argentina or Spain, but still, C=UK)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>CX and NF are Australian territories (C=AU)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>FO is a constituent country of Denmark (C=DK), exactly like Scotland wrt UK<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>GU is a non incorporated territory of the United States of America (C=US), just like Porto Rico<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>GG, IM, JE are Crown dependancies, can possibly be considered as countries (C=GG/IM/JE), but anyway have administrative subdivisions<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>LB, ME, MK, SI (not SVN) are countries, and have administrative subdivisions (localities, and a second level for LB)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>RS is a country (C=RS), has districts and localities, part of its province is Kosovo, a self-proclaimed country recognized by at least 2 UN members (C=XX is acceptable, as well as C=RS for this province)<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>PS is in an unsatisfying situation, but anyway is recognized by at least 2 UN members, so C=PS is good, and this country has 2 levels of administrative subdivisions<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>EH is a self-proclaimed country, disputed by Morocco, but recognized by at least 2 UN members, so C=EH is good, and this country has several localities<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>SG is of course a country, but also a city, is composed of 64 islands, I don’t know if it’s possible to have their name in an attribute<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>TW is a complicated story (with China), but this country is recognized by at least 2 UN members, so C=TW is fine; this country has administrative subdivisions<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>VA is weird, not completely a sovereign state (its UN representation is the Holy See — and not Vatican), more like an international organization like UN; there’s no Vatican nationality; C=VA is possibly invalid<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>AN is not to be used again until december 2061, replaced by CW/SX/BQ, their status is unclear<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-US>NU is also unclear (is it part of NZ or UK, or an autonomous country?), anyway it has subdivisions (localities)<o:p></o:p></span></li></ul></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>That leaves SG as possibly ST/L problematic (but « C=SG, L=Singapore » is fine), and CW/SX/BQ have to be reviewed. Is it really necessary to have exceptions?<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><div><p class=MsoNormal><span lang=EN-US>Cordialement,<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US>Erwann Abalea<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span lang=EN-US>Le 14 juil. 2016 à 11:51, </span>陳立群<span lang=EN-US> <<a href="mailto:realsky@cht.com.tw">realsky@cht.com.tw</a>> a écrit :<o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>I did thank for Ben’ record of July 1’s Policy Review Working Group Call and Peter’s asking .</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> Because there are two issues, I modify the subject to “Suggestion to amend BR Section7.1.4.2.2d/e”.<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> And left the second issue about EV Gudelines section 9.2.5 & X.520, RFC 5280 in RE: [cabfpub] EV Gudelines section 9.2.5 & X.520</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>To prevent presentation layout problem , I attached word and pdf version as attached file, and past as below for further discussion. <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><p class=MsoNormal align=center style='text-align:center'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> <span class=apple-converted-space> </span></span><b><span lang=EN-US style='font-size:14.0pt;font-family:"Calibri","sans-serif"'>Amend of SSL BR section 7.1.4.2.2 d & e</span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Statement of intent:</span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>In SSL BR section 7.1.4.2.2 d & e, either localityName or stateOrProvinceName is required for OV and IV SSL Certificates. As<span class=apple-converted-space> </span>CABF Bugzilla<span class=apple-converted-space> </span></span>–<span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Bug#2<span class=apple-converted-space> </span><a href="https://bugzilla.cabforum.org/show_bug.cgi?id=2"><span style='color:purple'>https://bugzilla.cabforum.org/show_bug.cgi?id=2</span></a><span class=apple-converted-space> </span>,<span class=apple-converted-space> </span>We amend section 7.1.4.2.2 d & e to solve below situations:<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>(1). For small countries/jurisdictions, if they do not set up any state or province.<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Some CAs<span class=apple-converted-space> </span></span><span class=shorttext><span lang=EN style='font-family:"Arial","sans-serif";color:#222222'>misplaced absence province or state name.</span></span><span lang=EN style='font-family:"Calibri","sans-serif"'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>(2). The organizationName is already unique at the country level.<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>If the subject:organizationName and subject:countryName fields are present and the country/jurisdiction specified by the subject:countryName field has a centralized registry for that kind of organizations so that the organization name specified by the subject:organizationName field is "unique" in the entire country/jurisdiction. Those centralized registry databases are QGIS(Qualified Government Information Source, ) or QTIS(Qualified Government Tax Information Source) , and government law keep the organizations’ names are unique.<span class=apple-converted-space> </span><span style='color:blue'>[Note 1]</span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>(3).In EU, "We found it is not suitable to enforce the CA to insert locality(L) or stateOrProvinceName(ST) into the subject DN in small country" remains still open as it is the same in other EU countries too. Please see<span class=apple-converted-space> </span><a href="https://portal.etsi.org/TBSiteMap/ESI/ESIActivities.aspx"><span style='color:purple'>https://portal.etsi.org//TBSiteMap/ESI/ESIActivities.aspx</span></a><o:p></o:p></span></p></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>a. ETSI EN 319 412-1 "Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 1: Overview and common data structures".</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>b. ETSI EN 319 412-3 "Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons".</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>C.319 412-4 v1.1.1: Certificate profile for web site certificates issued to organisations</span><span lang=EN-US><o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>The minimal set of Subject info for legal person in Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>4.2.1 Subject<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>The subject field shall include at least the following attributes as specified in Recommendation ITU-T X.520 [1]:<o:p></o:p></span></p></div><div><p class=MsoNormal>•<span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>countryName;<o:p></o:p></span></p></div><div><p class=MsoNormal>•<span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>organizationName;<o:p></o:p></span></p></div><div><p class=MsoNormal>•<span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>organizationIdentifier; and<o:p></o:p></span></p></div><div><p class=MsoNormal>•<span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>commonName.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>(4) There will be the possibilities of Distinguished Name collisions for different entities following current BR.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Table: Proposed versions:<span class=apple-converted-space> </span><o:p></o:p></span></p></div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td width=279 valign=top style='width:209.05pt;border:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>SSL BR V1.3.4<span class=apple-converted-space> </span><o:p></o:p></span></p></div></td><td width=279 valign=top style='width:209.05pt;border:solid windowtext 1.0pt;border-left:none;padding:0cm 5.4pt 0cm 5.4pt'><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Proposed versions<o:p></o:p></span></p></div></td></tr><tr><td width=279 rowspan=4 valign=top style='width:209.05pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>7.1.4.2.2 Subject Distinguished Name Fields<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>d. Certificate Field:<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>subject:localityName (OID: 2.5.4.7)<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Required</span></b><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if the subject:organizationName field is present and the subject:stateOrProvinceName field is absent.<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Optional</span></b><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present.<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Times New Roman","serif"'>e. Certificate Field:<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria","serif"'>subject:stateOrProvinceName (OID: 2.5.4.8)</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Times New Roman","serif"'>Required<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria","serif"'>if the subject:organizationName field is present and subject:localityName field is absent.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Times New Roman","serif"'>Optional<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Cambria","serif"'>if subject:organizationName and subject:localityName fields are present.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div></td><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>1.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif"'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Dr. Ben Wilson of DigiCert’s version<o:p></o:p></span></p></div></td></tr><tr><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>7.1.4.2.2 Subject Distinguished Name Fields<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>d.Certificate Field:</span></b><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>subject:localityName (OID: 2.5.4.7)<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Required</span></b><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if the subject:organizationName field is present and the subject:stateOrProvinceName field is absent.<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Optional<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present<span style='color:blue'>, or (b) if the country name provided under subsection g. is Taiwan (TW), Singapore (SG)[Note 2], etc..</span><o:p></o:p></span></p></div><div style='margin-left:30.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>e.Certificate Field:</span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>subject:stateOrProvinceName (OID: 2.5.4.8)<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Required if the subject:organizationName field is present and subject:localityName field is absent.<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Optional<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if: (a) subject:organizationName and subject:localityName fields are present,<span class=apple-converted-space> </span><span style='color:blue'>or (b) if the country name provided under subsection g. is Taiwan (TW), Singapore (SG), etc..</span><o:p></o:p></span></p></div></td></tr><tr><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>2.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif"'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Dr. Wen-Cheng Wang of Chunghwa Telecom’s Version<o:p></o:p></span></p></div></td></tr><tr><td width=279 valign=top style='width:209.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>7.1.4.2.2 Subject Distinguished Name Fields<o:p></o:p></span></p></div><div style='margin-left:30.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>d. Certificate Field</span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>: subject:localityName (OID: 2.5.4.7)<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Required<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if the subject:organizationName field is present and the subject:stateOrProvinceName field is absent.<o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Optional<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present,<span class=apple-converted-space> </span><span style='color:blue'>or (b) if the subject:organizationName and subject:countryName fields are present and the country/jurisdiction specified by the subject:countryName field has a centralized registry for that kind of organizations so that the organization name specified by the subject:organizationName field is "unique" in the entire country/jurisdiction.</span><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>Normally, situation (b) may exist in small countries/jurisdictions such as Singapore (SG), Taiwan (TW), etc.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>e. Certificate Field:<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>subject:stateOrProvinceName (OID: 2.5.4.8)<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Required</span></b><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if the subject:organizationName field is present and subject:localityName field is absent.<o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Optional<span class=apple-converted-space> </span></span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>if: (a) the subject:organizationName and subject:stateOrProvinceName fields are present,<span class=apple-converted-space> </span><span style='color:blue'>or (b) if the subject:organizationName and subject:countryName fields are present and the country/jurisdiction specified by the subject:countryName field has a centralized registry for that kind of organizations so that the organization name specified by the subject:organizationName field is "unique" in the entire country/jurisdiction.</span><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>Normally, situation (b) may exist in small countries/jurisdictions such as Singapore (SG), Taiwan (TW), etc.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div></td></tr></table><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span><span lang=EN-US><o:p></o:p></span></p><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Some problems if we don’t amend SSL BR and soultions:</span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>1.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif"'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>For a Symantec OV SSL Certificate that I found in<span class=apple-converted-space> </span><a href="https://mv.vatican.va/3_EN/pages/MV_Home.html"><span style='color:purple'>https://mv.vatican.va/3_EN/pages/MV_Home.html</span></a><span class=apple-converted-space> </span>(with error message by browser for the FQDN in URL is not matched the Subject Alternative Name, *.catholica.va and catholica.va, in this SSL certificate)or you can see it in<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="https://crt.sh/?q=98+ef+2b+4c+43+39+ae+04+3b+bd+55+08+59+b2+b7+b4+ee+76+cb+af"><span style='color:purple'>https://crt.sh/?q=98+ef+2b+4c+43+39+ae+04+3b+bd+55+08+59+b2+b7+b4+ee+76+cb+af</span></a><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'>Its Subject DN is<span class=apple-converted-space> </span><br>commonName=*.catholica.va<br>organizationName=Department of Telecommunications<br>localityName=Vatican City<br>stateOrProvinceName=Vatican City State<br>countryName =VA</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'>The subject DN should be<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'>commonName=*.catholica.va<br>organizationName=Department of Telecommunications<br>countryName =VA</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'>It is enough to identify the domain name owner in Vatican.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'>Note that from<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://www.upu.int/fileadmin/documentsFiles/activities/addressingUnit/vatEn.pdf"><span style='font-size:10.0pt;font-family:"Courier New";color:#222222;text-decoration:none'>http://www.upu.int/fileadmin/documentsFiles/activities/addressingUnit/vatEn.pdf</span></a></span><span class=apple-converted-space><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'> </span></span><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'>given by Peter Brown of Amazon</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Courier New";color:#222222'>The Vatican uses an address format identical to that of Italy, except the province abbreviation, which is not used in the Vatican.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>2.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif"'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>A wildcard SSL certificate signed by GlobalSign at<span class=apple-converted-space> </span><a href="https://ebank.cotabank.com.tw/eBank/"><span style='color:purple'>https://ebank.cotabank.com.tw/eBank/</span></a>,<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Its Subject DN is<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>CN = *.<a href="http://cotabank.com.tw/"><span style='color:purple'>cotabank.com.tw</span></a><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>O = COTA Commercial Bank<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>OU = ITDs<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>L = Taichung<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>S = Taichung</span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>C = TW<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>But there is No Taichung Province or Taichung State in Taiwan, only Taichung city in Taiwan.<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'><br>I also mail to Doug of GlobalSign for below example,<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>Kaohsiung city is also a special municipality as Taichung city. For a wildcard SSL Certificate for a bank as in<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="https://accessible.bok.com.tw/"><span style='color:windowtext;text-decoration:none'>https://accessible.bok.com.tw/</span></a><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Its Subject DN is<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-size:9.0pt'>CN = *.<a href="http://bok.com.tw/"><span style='color:purple'>bok.com.tw</span></a></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-size:9.0pt'>O = BANK OF KAOHSIUNG CO., LTD.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-size:9.0pt'>OU = MIS Dept.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-size:9.0pt;color:red'>L = Kaohsiung</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-size:9.0pt;color:red'>S = Taiwan</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-size:9.0pt'>C = TW</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>The rule by GlobalSign vetting team is not the same as in cotabank in Taichung city for BANK OF KAOHSIUNG CO., LTD. in Kaohsiung city.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Please also see the Taichung City Government English webpages in<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://eng.taichung.gov.tw/mp.aspx?mp=1"><span style='color:purple'>http://eng.taichung.gov.tw/mp.aspx?mp=1</span></a><span class=apple-converted-space><span style='color:#1F497D'> </span></span><span style='color:#1F497D'>and Kaohsiung City Government English webpages in</span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://www.kcg.gov.tw/EN/Index.aspx"><span style='color:purple'>http://www.kcg.gov.tw/EN/Index.aspx</span></a><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>These two city governments called them “City” not province. They are<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>special municipalities, it is no need to put S=Taiwan.<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>We think below DN should be suitable:</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>CN = *.<a href="http://cotabank.com.tw/"><span style='color:purple'>cotabank.com.tw</span></a></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>O = COTA Commercial Bank</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>OU = ITDs</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>C = TW</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>CN = *.<a href="http://bok.com.tw/"><span style='color:purple'>bok.com.tw</span></a></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>O = BANK OF KAOHSIUNG CO., LTD.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>OU = MIS Dept.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>C = TW</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span class=shorttext><span lang=EN style='font-family:"Arial","sans-serif";color:#222222'>They can be simple and clear identify *.<a href="http://bok.com.tw/"><span style='color:purple'>bok.com.tw</span></a>’ and COTA Commercial Bank’s organization DNs follow our country’s law and x.520.</span></span><span class=apple-converted-space><span lang=EN style='font-family:"Arial","sans-serif";color:#222222'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>3.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif";color:#1F497D'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Another case is as<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="https://www.ecover.com.tw/"><span style='color:purple'>https://www.ecover.com.tw/</span></a><span class=apple-converted-space><span style='color:#1F497D'> </span></span><span style='color:#1F497D'>issued by Comodo,<span class=apple-converted-space> </span></span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>CN =<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://www.ecover.com.tw/"><span style='color:purple'>www.ecover.com.tw</span></a><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = GlobalTrustSSLPro</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = Provided by Global Digital Inc.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = MIS Dept</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>O = SOUTH CHINA INSURANCE CO., LTD.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>STREET = 5F,No.560,Sec. 4,Chung Hsiao E Rd.,Taipei,Taiwan</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>L = Taipei</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>S = Taiwan</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>PostalCode = 110</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>C = TW</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>As Taipei City is a Municipality, we should not put S=Taiwan. Also for its address, you can see other example such as<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://www.tcc.gov.tw/en/cp.aspx?n=BBF5C83DDCCEE939"><span style='color:purple'>http://www.tcc.gov.tw/en/cp.aspx?n=BBF5C83DDCCEE939</span></a><span class=apple-converted-space><span style='color:#1F497D'> </span></span><span style='color:#1F497D'>of Taipei City Council:</span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-size:8.5pt;font-family:"微軟正黑體","sans-serif";color:#333333'>Copyright ©2013 Taipei City Council<span class=apple-converted-space> </span><br>No.507, Sec. 4, Ren-ai Rd., Xinyi Dist., Taipei City 110, Taiwan (R.O.C.)<br></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="tel:(02)2729-7708"><span style='font-size:8.5pt;font-family:"微軟正黑體","sans-serif";color:purple'>TEL:(02)2729-7708</span></a></span><span lang=EN-US style='font-size:8.5pt;font-family:"微軟正黑體","sans-serif";color:#333333'><br>Last Updated: 2016-05-16</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>No need to put Taiwan Province.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>The DN follows the Taiwan’s company act and current BR should be</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>CN =<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://www.ecover.com.tw/"><span style='color:purple'>www.ecover.com.tw</span></a><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = GlobalTrustSSLPro</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = Provided by Global Digital Inc.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = MIS Dept</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>O = SOUTH CHINA INSURANCE CO., LTD.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>STREET = 5F,No.560,Sec. 4,Chung Hsiao E Rd., Taipei City ,Taiwan</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>L = Taipei</span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>City</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>PostalCode = 110</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>C = TW</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:6.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>But it may misinterpretate SOUTH CHINA INSURANCE CO., LTD as registered in Taipei City. So we suggest to modify SSL BR and use below DN</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>CN =<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://www.ecover.com.tw/"><span style='color:purple'>www.ecover.com.tw</span></a><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = GlobalTrustSSLPro</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = Provided by Global Digital Inc.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>OU = MIS Dept</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>O = SOUTH CHINA INSURANCE CO., LTD.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>STREET = 5F,No.560,Sec. 4,Chung Hsiao E Rd., Taipei City ,Taiwan</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>PostalCode = 110</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>C = TW</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Because from Note1,<span class=apple-converted-space><span style='color:#1F497D'> </span></span>according Taiwan’s Company Act,<span class=apple-converted-space><span style='color:#1F497D'> </span></span>the company name must be unique for the whole country. So we can omit the L = Taipei City. Also Taipei City appears in the Street field.<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>4.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif"'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>On the other hand, in Taiwan, we have small businesses (such as stores, or as Business Entities as in EVGL) which is established and registered according to our Business Registration Act(<a href="http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080004"><span style='color:purple'>http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080004</span></a>, See Article 28). In Taiwan, small businesses is registered in municipal level. The Business Registration Law requires that the name of the small business must be unique with the municipality (that will be a city or a county) where it is registered.<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>For example, there might be a small business named "ABC Store" registered in Taipei City, while there might be another "ABC Store" registered in NantouCounty.<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Therefore, the suitable subject DN for these two small businesses will be<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Courier New"'>“</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>CN=ABC Store’s FQDN<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>O=ABC Store<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>L=Taipei City<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>C=TW<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>and<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>CN=ABC Store’s FQDN<o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>O=ABC Store<o:p></o:p></span></p></div><p class=MsoPlainText style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>L=Nantou County<o:p></o:p></span></p><p class=MsoPlainText style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>C=TW<o:p></o:p></span></p><p class=MsoPlainText style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>respectively.<o:p></o:p></span></p><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div style='margin-left:18.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>5.</span></b><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><u><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>In X.520 or within a CA, A CA has to let different entities to have different Distinguished Name, different serial numbers and different key pairs. It is fundamental.</span></u><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>For IV SSL certificate or citizen certificates, we can add unique serial number in Subject Distinguished Names to two different entities have the same names. (Peter Brown of Amazon in the discussion said EV SSL certificates solve the problem, but don</span><span lang=EN-US style='font-family:"Courier New"'>’</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>t forget that<span class=apple-converted-space> </span><u><span style='color:blue'>EV SSL Certificates will not be issued to individuals</span></u>, only be issued to Private Organization, Government Entities, Business entities and non-profit international organizations.)<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>For OV SSL certificates, we have explained that there are some other small countries or jurisdictions where stateOrProvinceName is not available and where companies is registered in the country level.<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>In such situations, we do not think it is suitable to enforce the CA to insert locality(L) or stateOrProvinceName(ST) into the subject DN.<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Peter tended to interpret the current BR that the localityName and stateOrProvinceName attributes as identifying the subject’s address of existence or operation. However, to enforce this kind of interpretation and require the Subject DN must at least contain either the localityName and stateOrProvinceName attributes may cause problem in some situations as Dr. Wen-Cheng Wang’s email before, especially in some small country where organizations are allowed to be registered at country-level.<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>For example, in Taiwan, a corporation can be registered at country-level but can also be register at city/county-level. If there is a country-level corporation named “Farmer’s Association” of which physical address is located in Taipei City, with current Subject DN rule of BR, its Subject DN will be “C=TW, L=Taipei City, O=Farmer’s Association”. However, if there is also a city/county-level “Farmer’s Association” in Taipei City, its Subject DN will also be “C=TW, L=Taipei City, O=Farmer’s Association”. How do you distinguish them by DN?</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>We do not understand why we need to enforce require the Subject DN must at least contain either the localityName and stateOrProvinceName attributes if the registered organizational name of a country-level corporation/organization is already guaranteed to be unique under the country name?</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>The following diagram is taken from Annex B of ITU-T X.521 (Suggested name form and Directory information tree structures). Please note path 1 -> 3, it suggests that there is no need to include a Locality attribute in the directory name of a country-level organization.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'><image001.jpg></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Several CAs have issued certificates with countryName = TW where other subject attributes are incorrectly set. That</span><span lang=EN-US style='font-family:"Courier New"'>’</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>s because those CA don’t not consider the real situation, so they try to fill some attributes to fill the state=Taiwan or even state=Taichung.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Other Q & A</span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:48.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>1.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif"'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>In Bugzilla(CABF Bugzilla<span class=apple-converted-space> </span></span>–<span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>Bug#2<span class=apple-converted-space> </span><a href="https://bugzilla.cabforum.org/show_bug.cgi?id=2"><span style='color:purple'>https://bugzilla.cabforum.org/show_bug.cgi?id=2</span></a>)<span class=apple-converted-space> </span>, Dimitris Zacharopoulos suggested that<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div style='margin-left:30.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div style='margin-left:30.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>There are some countries that have a centralized registry for commercial companies which means that company names are "unique" in the entire country.<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:30.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:30.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>The BR could address this issue in Section 7.1.4.2.2d/e and provide an exception for these cases. However, the CA's qualified auditors should verify that there is a single company naming registry in the entire country which forces uniqueness of company names. The Root programs could request a letter from the CA's auditors to verify this situation that would enable the exception.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:30.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>Ans: I think the CA's qualified auditors will be glad to verify that there is a single company naming registry in the entire country which forces uniqueness of company names and offer the letter under request of Browser Root Certificate Program. Also I have showed the URL of Taiwan’s company act. Taiwan’s National Development Council asked Government PKI’s qualified auditors to join the F2F Meeting 39 in Redmond. Li-Chun CHEN has helped David of KPMG, Taiwan to join.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>Below is website of Company Registration Database:</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="http://gcis.nat.gov.tw/mainNew/classNAction.do?method=list&pkGcisClassN=4,website"><span style='color:#4F81BD;text-decoration:none'>http://gcis.nat.gov.tw/mainNew/classNAction.do?method=list&pkGcisClassN=4,website</span></a><span class=apple-converted-space><span style='color:#4F81BD'> </span></span><span style='color:#4F81BD'>of Importer registration system:https://<a href="http://fbfh.trade.gov.tw/rich/text/indexfbOL.asp"><span style='color:purple'>fbfh.trade.gov.tw/rich/text/indexfbOL.asp</span></a></span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:48.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>2.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif";color:#4F81BD'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>In CA/B Forum meeting of July 7th, Kirk asked if a general rule can be written rather than writing up a list of specific countries. Ben said that had not been discussed.<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:24.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>Ans: What about discussion like<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>the minimal set of Subject info for legal person in Electronic Signatures and Infrastructures (ESI); Certificate Profiles; Part 3: Certificate profile for certificates issued to legal persons? Or choose the edition from Ben or Wen-Cheng.<o:p></o:p></span></p></div><div style='margin-left:48.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:48.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>3.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif";color:#4F81BD'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>In certificate Policy working Group, Ben offer discussion records between Peter Brown and Li-Chun CHEN as<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="https://www.mail-archive.com/public@cabforum.org/msg01333.html"><span style='color:purple'>https://www.mail-archive.com/public@cabforum.org/msg01333.html</span></a><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> Note that in RFC 3739 there are Qualified Certificates Profiles, In section </span><span lang=EN-US>2.4. Uniqueness of names:<o:p></o:p></span></pre><pre><span lang=EN-US> <o:p></o:p></span></pre><pre><span lang=EN-US> Distinguished name is originally defined in X.501 [X.501] as a<o:p></o:p></span></pre><pre><span lang=EN-US> representation of a directory name, defined as a construct that<o:p></o:p></span></pre><pre><span lang=EN-US> identifies a particular object from among a set of all objects. The<o:p></o:p></span></pre><pre><span lang=EN-US> distinguished name MUST be unique for each subject entity certified<o:p></o:p></span></pre><pre><span lang=EN-US> by the one CA as defined by the issuer name field, for the whole life<o:p></o:p></span></pre><pre><span lang=EN-US> time of the CA.<o:p></o:p></span></pre><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> </span><span lang=EN-US><o:p></o:p></span></pre><pre style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'>For Taiwan’s Government PKI, there is a certificate and CRL profile as</span><span lang=EN-US><o:p></o:p></span></pre><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'><a href="http://grca.nat.gov.tw/download/GPKI_Cert_and_CRL_Profiles_v2.0.pdf"><span style='color:purple'>http://grca.nat.gov.tw/download/GPKI_Cert_and_CRL_Profiles_v2.0.pdf</span></a>, we have this document around 14 years. Only that it is written in Tradition Chinese, not English. So we don’t think there are some issues that Peter said, like </span>“<span lang=EN-US>For end-entity certificates in the WebPKI, as implemented, there is no requirement that different entities have different Subject values.</span>”<span lang=EN-US><o:p></o:p></span></pre><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:blue'> </span><span lang=EN-US><o:p></o:p></span></p><div style='margin-left:48.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>4.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif";color:#1F497D'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Doug Beattie<span class=apple-converted-space> </span>said in Validation Working Group :<span class=apple-converted-space> </span>I still think it would be a good idea to enumerate the entire list of Country codes where both stateOrProvinceName and localityName can be omitted so there is no confusion and compliance can be monitored.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div style='margin-left:48.0pt'><p class=MsoNormal style='text-indent:-18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>5.</span><span lang=EN-US style='font-size:7.0pt;font-family:"Times New Roman","serif";color:#1F497D'> <span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Ans: I list all the Country Codes as in Note 2. But we have to consider it seems that some are not ISO 3166-1 code, some is ISO 3166-2 code. The original source is from <span class=apple-converted-space> </span><b><a href="https://www.drupal.org/node/636464"><span style='color:purple'>https://www.drupal.org/node/636464</span></a></b>, and I check by web sites such as<span class=apple-converted-space> </span></span><span class=langwithname><span lang=EN style='font-family:"Calibri","sans-serif"'>Wikipedia, those government sites,</span></span><span class=apple-converted-space><span lang=EN style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><a href="https://en.wikipedia.org/wiki/ISO_3166"><span style='color:purple'>https://en.wikipedia.org/wiki/ISO_3166</span></a><span style='color:#1F497D'>and<span class=apple-converted-space> </span></span><a href="http://userpage.chemie.fu-berlin.de/diverse/doc/ISO_3166.html"><span style='color:purple'>http://userpage.chemie.fu-berlin.de/diverse/doc/ISO_3166.html</span></a>. We hope more volunteers provide comments and advices.<o:p></o:p></span></p></div><div style='margin-left:48.0pt'><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><pre><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#4F81BD'> </span><span lang=EN-US><o:p></o:p></span></pre><div><p class=MsoNormal><b><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></b><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:blue'>[Note 1]:</span><span class=apple-converted-space><span lang=EN-US style='font-family:"Calibri","sans-serif"'> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'>In Taiwan, according our Company Act, the company name must be unique for the whole country. Furthermore, Taiwan’s Company Act requires the company to register its business location which will be some city or county.<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>In<span class=apple-converted-space> </span><a href="http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080001"><span style='color:purple'>http://law.moj.gov.tw/Eng/LawClass/LawAll.aspx?PCode=J0080001</span></a>,<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Company Act article 18 ,<span class=apple-converted-space> </span></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'>No company may use a corporate name which is identical with that of another company. Where the corporate names of two companies contain any marks or identifying words respectively that may distinguish the different categories of business of the two companies, such corporate names shall not be considered identical with each other.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:red'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>A company may conduct any business that is not prohibited or restricted by the laws and regulations, except for those requiring special approvals which shall be explicitly described in the Articles of Incorporation of the company.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:12.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Any category of business to be conducted by a company shall, when making the registration thereof, be identified with the Category Code applicable to the said business category as assigned in the Table of Categories of Businesses by the central competent authority. For a company which has already been registered, and the category of business conducted by it is registered with descriptive words, then, such descriptive words shall be replaced with the applicable Category Code as assigned in the foregoing Table, while applying for alteration of the entries of existing company registration record.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>A company shall not use a name which tends to mislead the public to associate it with the name of a government agency or a public welfare organization, or has an implication of offending against public order or good customs.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'>Before proceeding to the company incorporation registration procedure, a company shall first apply for approval and reservation, for a specific period of time, of its corporate name and the scope of its business. Rules for examination and approval of such application shall be prescribed by the central competent authority.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>In Taiwan, since the company name must be unique for the whole country, the subject DN for a company, such as Chunghwa Telecom, should look like<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'>"C=TW, O=Chunghwa Telecom Co., Ltd<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>This subject DN already uniquely identifies the company.<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal style='text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>There is no necessary to add RDNs such as locality(L), or stateOrProvinceName(ST), Address (optional in BR) into the subject DN.<span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif"'> <o:p></o:p></span></p></div><p class=MsoPlainText style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:0cm;text-indent:18.0pt'><span lang=EN-US style='font-family:"Calibri","sans-serif"'>If we specify the subject DN as "C=TW, L=Taipei City, O=Chunghwa Telecom Co., Ltd.", that will mean it is a company registered in Taipei City. This will not conform to our Company Law because companies in Taiwan is registered in the country level not in the municipal level.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:blue'> </span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:blue'>[Note 2]:</span><span lang=EN-US><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Table: Example of small countries/jurisdictions<o:p></o:p></span></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US> <o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border:solid windowtext 1.0pt;border-left:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US><a href="https://en.wiktionary.org/wiki/ISO" title=ISO><span style='color:purple;text-decoration:none'>ISO</span></a><span class=apple-converted-space> </span>3166<span class=apple-converted-space> </span><a href="https://en.wiktionary.org/wiki/country_code" title="country code"><span style='color:purple;text-decoration:none'>country code</span></a><o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US><a href="https://en.wiktionary.org/wiki/Bouvet_Island" title="Bouvet Island"><span style='color:purple;text-decoration:none'>Bouvet Island</span></a><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>BV<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>British Virgin Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>VG<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Christmas Island<span class=apple-converted-space> </span><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>CX<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Falkland Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>FK<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Faroe Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>FO<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>French Guiana<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>GF<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Gibraltar<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US><a href="https://en.wikipedia.org/wiki/ISO_3166-2:GI" title="ISO 3166-2:GI"><span style='color:purple;text-decoration:none'>GI</span></a><o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Guadeloupe<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>GP<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Guam<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>GU<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Guernsey<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>GG<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Isle of Man<span class=apple-converted-space> </span><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>IM<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Jersey<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>JE<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Lebanon<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>LB<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Macedonia<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>MK<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Martinique<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>MQ<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Mayotte<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>YT<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Montenegro<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>ME<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Netherlands Antilles<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>AN<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Niue<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>NU<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Norfolk Island<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>NF<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Palestinian Territory<span class=apple-converted-space> </span><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>PS<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Pitcairn<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>PN<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Reunion<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>RE<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Serbia<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>RS<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Singapore<span class=apple-converted-space> </span><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>SG<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Slovenia<span class=apple-converted-space> </span><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>SVN<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>South Georgia and the South Sandwich Islands<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>GS<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Svalbard and Jan Mayen<span class=apple-converted-space> </span><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>SJ<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Taiwan<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>TW<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Vatican<o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>VA<o:p></o:p></span></p></td></tr><tr><td width=194 valign=top style='width:145.75pt;border:solid windowtext 1.0pt;border-top:none;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>Western Sahara<span class=apple-converted-space> </span><o:p></o:p></span></p></td><td width=178 valign=top style='width:133.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US>EH<o:p></o:p></span></p></td></tr></table><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'>Sincerely Yours,</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> Li-Chun CHEN</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> Deputy Senior Engineer</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> CISSP, CISA, CISM, PMP,</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> Information & Communication Security Dept.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> Data Communication Business Group</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> Chunghwa Telecom Co. Ltd.</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> <span class=apple-converted-space> </span><a href="mailto:realsky@cht.com.tw"><span style='color:purple'>realsky@cht.com.tw</span></a></span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=NO-BOK style='font-family:"Calibri","sans-serif";color:#1F497D'> +886-2-2344-4820#4025</span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-family:"Calibri","sans-serif";color:#1F497D'> </span><span lang=EN-US style='font-family:"Calibri","sans-serif"'><o:p></o:p></span></p></div></div></blockquote></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div></body></html><br><html><div><div>本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任. </div><div>Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.</div></div><div><br></div><div><br></div></html>