<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Comic Sans MS";
panose-1:3 15 7 2 3 3 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texto de globo Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.EstiloCorreo17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="ES" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hi, we need to issue a certificate for <a href="http://www.gueñes.eus">
www.gueñes.eus</a>. According to CABForum requirements, the dnsName, if included in the CN, must match the SAN of the certificate. Our problem is that according to RFC5280 the dnsName in the SAN must be encoded with IA5String, and can’t include not ASCII 7-bits
characters (like ‘ñ’). If we encode the CN using UTF-8 (<a href="http://www.gueñes.eus">www.gueñes.eus</a>) and the SAN using IA5String (<a href="http://www.xn--guees-qta.eus">www.xn--guees-qta.eus</a>), then tools like zlint or
<a href="https://misissued.com/batch/1/">https://misissued.com/batch/1/</a> don’t accept them as valid, because they see them as different names (<a href="http://www.gueñes.eus">www.gueñes.eus</a> in CN vs
<a href="http://www.xn--guees-qta.eus">www.xn--guees-qta.eus</a> in SAN).</span><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New";color:#222222">
</span><span lang="EN-US">Shall we issue the CN as <a href="http://www.xn--guees-qta.eus">
<span style="color:windowtext;text-decoration:none">www.xn--guees-qta.eus</span></a> like the SAN, or can we have different values between CN and SAN?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">Thanks<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellpadding="0" width="650" style="width:487.5pt;background:white">
<tbody>
<tr>
<td style="background:transparent;padding:7.5pt 7.5pt 7.5pt 7.5pt">
<p class="MsoNormal"><b><i><span style="color:#003366;mso-fareast-language:ES">.eus</span></i></b><b><span style="color:#003366;mso-fareast-language:ES">
<span style="font-variant:small-caps">gara !</span><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana","sans-serif";color:#003366;background:white;mso-fareast-language:ES">horregatik orain nire helbide elektronikoa da:</span><span style="color:#003366;mso-fareast-language:ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#003366;mso-fareast-language:ES">por eso mi dirección de correo electrónico ahora es: </span><span style="mso-fareast-language:ES"><a href="mailto:o-garcia@izenpe.eus"><span style="color:blue">o-garcia@izenpe.eus</span></a><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:9.75pt"><b><span style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black;mso-fareast-language:ES"><o:p> </o:p></span></b></p>
<p class="MsoNormal" style="line-height:9.75pt"><b><span style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black;mso-fareast-language:ES">Oscar García</span></b><span style="mso-fareast-language:ES"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:9.75pt"><b><span style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black;mso-fareast-language:ES">CISSP, CISM<o:p></o:p></span></b></p>
<p class="MsoNormal" style="line-height:9.75pt"><span style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black;mso-fareast-language:ES"><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-line-height-alt:9.75pt"><span style="color:navy;mso-fareast-language:ES"><img border="0" width="589" height="99" id="Imagen_x0020_1" src="cid:image001.jpg@01D3F2A7.BBC7F3A0" alt="Descripción: Descripción: firma_email_Izenpe_eus"></span><span style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:black;mso-fareast-language:ES"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="80%" style="width:80.0%;background:transparent;padding:7.5pt 7.5pt 7.5pt 7.5pt">
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;background:white">
<tbody>
<tr>
<td valign="top" style="padding:0cm 0cm 0cm 0cm"></td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td valign="top" style="background:transparent;padding:7.5pt 7.5pt 7.5pt 7.5pt">
<p class="MsoNormal" style="line-height:9.75pt"><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES">ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea. Okerreko
helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style="color:#888888;mso-fareast-language:ES"><br>
</span><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES">ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted lo recibe por
error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span style="font-size:12.0pt;mso-fareast-language:ES"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="mso-fareast-language:ES"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Comic Sans MS";color:purple;mso-fareast-language:ES"><img border="0" width="199" height="71" id="Imagen_x0020_2" src="cid:image002.png@01D3F2A7.BBC7F3A0" alt="Descripción: cid:image001.png@01D2DDEC.B8FB6830"></span><span style="mso-fareast-language:ES"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>