<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"\@MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:Cambria-Bold;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Cambria-BoldItalic;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:JA;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.line874, li.line874, div.line874
{mso-style-name:line874;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
mso-fareast-language:JA;}
p.line862, li.line862, div.line862
{mso-style-name:line862;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
mso-fareast-language:JA;}
span.f0xo1gc-mb-y2
{mso-style-name:f0xo1gc-mb-y2;
border:none windowtext 1.0pt;
padding:0in;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">There has been a discussion on a Mozilla list <span class="f0xo1gc-mb-y2">
<span style="color:#222222">Certificates with Metadata-Only Subject Fields, <a href="https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/Sae5lpT02Ng">
https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/Sae5lpT02Ng</a></span></span><span class="f0xo1gc-mb-y2">, that concerns BR
</span><span style="mso-fareast-language:EN-US">7.1.4.2.2. Subject Distinguished Name Fields:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><b><span style="mso-fareast-language:EN-US">j. Other Subject Attributes<o:p></o:p></span></b></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><span style="mso-fareast-language:EN-US">All other optional attributes, when present within the subject field, MUST contain information that has<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in;text-autospace:none"><span style="mso-fareast-language:EN-US">been verified by the CA.
<span style="background:yellow;mso-highlight:yellow">Optional attributes MUST NOT contain metadata such as $B!F(B.$B!G(B, $B!F!>!F(B, and $B!F(B $B!F(B (i.e. space)<o:p></o:p></span></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="background:yellow;mso-highlight:yellow;mso-fareast-language:EN-US">characters, and/or any other indication that the value is absent, incomplete, or not applicable</span><span style="mso-fareast-language:EN-US">.</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My question to the Forum is – where did this language come from? An RFC? Some other standard? Does this prohibition actually make sense (especially for the OU field, which is optional but must be verified by the CA if it includes identity-type
information)? Can we consider deleting sub (j) or clarifying it only applies to certain fields?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Ballot 33 – Subject attribute requirements (4 August 2009)<o:p></o:p></b></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Vote<o:p></o:p></span></p>
<p class="line862" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Yes: Entrust, <span style="border:none windowtext 1.0pt;padding:0in">VeriSign</span>, <span style="border:none windowtext 1.0pt;padding:0in">GlobalSign</span>, <span style="border:none windowtext 1.0pt;padding:0in">DigiCert</span>,
T-Systems, <span style="border:none windowtext 1.0pt;padding:0in">QuoVadis</span>, <span style="border:none windowtext 1.0pt;padding:0in">StartCom</span>, Buypass, Trustwave, Comodo, SSC and Microsoft.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">No: None.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Abstain: None.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Result: Accepted.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Motion:<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Steve Roylance made the following motion, and Johnathan Nightingale and Jay Schiavo endorsed it:<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:black" align="center">
</div>
<p class="line862" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Motion begins<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:black" align="center">
</div>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">The Guidelines should be amended by the following erratum.<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:black" align="center">
</div>
<p class="line862" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Erratum begins<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:black" align="center">
</div>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Delete the following paragraph from Section 6.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">6. EV Certificate Content Requirements This section sets forth minimum requirements for the content of the EV Certificate as they relate to the identity of the CA and the Subject of
the EV Certificate.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Insert the following paragraph:<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="line874" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:0in;margin-left:.5in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">6. EV Certificate Content Requirements This section sets forth minimum requirements for the content of the EV Certificate as they relate to the identity of the CA and the Subject of
the EV Certificate. Optional data fields within the subject DN should contain either information verified by the CA or be left empty.
<span style="background:yellow;mso-highlight:yellow">Meta data such as $B!F(B.$B!G(B, $B!F(B-$B!F(B and $B!F(B $B!F(B characters and or any other indication that the field is not applicable should not be used.</span><o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Delete the following paragraph from Section 6(a)(4).<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black"><o:p> </o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Contents These fields MUST contain information only at and above the level of the Incorporating Agency or Registration Agency – e.g., the Jurisdiction of Incorporation for an Incorporating
Agency or Jurisdiction of Registration for a Registration Agency at the country level would include country information but not state or province or locality information; the Jurisdiction of Incorporation for the applicable Incorporating Agency or Registration
Agency at the state or province level would include both country and state or province information, but not locality information; and so forth. Country information MUST be specified using the applicable ISO country code. State or province information, and
locality information (where applicable), for the Subject$B!G(Bs Jurisdiction of Incorporation or Registration MUST be specified using the full name of the applicable jurisdiction.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Insert the following paragraph:<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Contents These fields MUST contain information only relevant to the level of the Incorporating Agency or Registration Agency – e.g., the Jurisdiction of Incorporation for an Incorporating
Agency or Jurisdiction of Registration for a Registration Agency at the country level would include country information but not state or province or locality information; the Jurisdiction of Incorporation for the applicable Incorporating Agency or Registration
Agency at the state or province level would include both country and state or province information, but not locality information ; the Jurisdiction of Incorporation for the applicable Incorporating Agency or Registration Agency at locality level would include
country and also state or province information where the state or province regulates the registration of the entities at the locality level. Country information MUST be specified using the applicable ISO country code. State or province or locality information
(where applicable), for the Subject$B!G(Bs Jurisdiction of Incorporation or Registration MUST be specified using the full name of the applicable jurisdiction.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Delete the following paragraph from the Definitions Section.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">41. Jurisdiction of Incorporation: In the case of a Private Organization, the country and (where applicable) the state or province where the organization$B!G(Bs legal existence was established
by a filing with (or an act of) an appropriate government agency or entity (e.g., where it was incorporated). In the case of a Government Entity, the country and (where applicable) the state or province where the Entity$B!G(Bs legal existence was created by law.<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Insert the following paragraph:<o:p></o:p></span></p>
<p class="line874" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">41. Jurisdiction of Incorporation: In the case of a Private Organization, the country and (where applicable) the state or province or locality where the organization$B!G(Bs legal existence
was established by a filing with (or an act of) an appropriate government agency or entity (e.g., where it was incorporated). In the case of a Government Entity, the country and (where applicable) the state or province where the Entity$B!G(Bs legal existence was
created by law.<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:black" align="center">
</div>
<p class="line862" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Erratum ends<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:black" align="center">
</div>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:black" align="center">
</div>
<p class="line862" style="margin:0in;margin-bottom:.0001pt;background:white;font-variant-ligatures: normal;font-variant-caps: normal;orphans: 2;text-align:start;widows: 2;-webkit-text-stroke-width: 0px;text-decoration-style: initial;text-decoration-color: initial;word-spacing:0px">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:black">Motion ends<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
</div>
</body>
</html>