<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><font face="Calibri">Excerpt from the BRs:</font></p>
<p><font face="Calibri">7.1.4.2.2. Subject Distinguished Name Fields<br>
a. Certificate Field: subject:commonName (OID 2.5.4.3)<br>
Required/Optional: Deprecated (Discouraged, but not prohibited)<br>
Contents: If present, this field MUST contain a single IP
address or Fully‐Qualified Domain<br>
Name that is one of the values contained in the Certificate’s
subjectAltName extension (see<br>
Section 7.1.4.2.1).</font></p>
<p><font face="Calibri"></font><br>
</p>
<br>
<div class="moz-cite-prefix">Il 10/05/2017 14:36, Doug Beattie via
Public ha scritto:<br>
</div>
<blockquote type="cite"
cite="mid:SG2PR0301MB1190C3A51B9A9BD35C329325F0EC0@SG2PR0301MB1190.apcprd03.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">In reading the BRs, I see the requirement
that the SAN must contain at least one value (7.1.4.2.1), but
I can’t find a reference that the value in the CN needs to be
in the SAN. Am I missing that link somewhere, or can the
value in the CN be omitted from the SAN? With Chrome
depreciating use of CN, CAs will certainly want to include the
value in the SAN, but is there a BR requirement that the CN
value must be in the SAN?<o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Public@cabforum.org">Public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://cabforum.org/mailman/listinfo/public">https://cabforum.org/mailman/listinfo/public</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<p style="font-family: Serif">
Cordiali saluti,<br>
<br>
Adriano Santoni<br>
ACTALIS S.p.A.<br>
(Aruba Group)</p>
</div>
</body>
</html>