[Smcwg-public] orgID - Government entities

[Dimitris Zacharopoulos (HARICA)]

It should be ISO 3166-1 for the alpha-2 character code. This was 
probably an oversight.

Stephen, is this something we could add to the upcoming ballot with fixes?


Thanks,
Dimitris.

On 30/3/2023 8:24 μ.μ., Bruce Morton via Smcwg-public wrote:
>
> Sorry I missed the call yesterday.
>
> I am hoping the QIIS item can be added to the erratum. In addition, we 
> have the following observation.
>
> S/MIME BR 7.1.4.2.2.d. Note 2 states, “For Government Entities, the CA 
> SHALL enter the Registration Scheme identifier ‘GOV’ followed by the 2 
> character ISO 3166 country code for the nation in which the Government 
> Entity is located. If the Government Entity is verified at a 
> subdivision (state or province) level, then a plus “+” (0x2B (ASCII), 
> U+002B (UTF‐8)) followed by a *2 character ISO 3166‐2 identifier* for 
> the subdivision is added.”
>
> The wording is complicated as there are no 2 character 3166-2 
> identifiers as they start with the 2 character country code plus a 
> hyphen. For California the code is *US-*CA, but we expect the result 
> for the orgID to be GOVUS+CA and not GOVUS+US-CA. For Czechia, they 
> append 2 or 3 numerals such as CZ-201. I assume we want to show 
> GOVCZ+201 (see https://www.iso.org/obp/ui/#iso:code:3166:CZ), but this 
> is adding more than 2 characters.
>
> I am not sure how to state this but I think we want these examples:
>
> OrgID GOVUS based on ISO 3166-1 US indicator
>
> OrgID GOVUS+CA based on ISO 3166-1 US indicator and ISO3166-2 US-CA 
> indicator
>
> OrgID GOV CZ+201 based on ISO 3166-1 CZ indicator and ISO3166-2 CZ-201 
> indicator
>
> So could we add this to a clarification ballot and change “followed by 
> a 2 character ISO 3166‐2 identifier for the subdivision added” to 
> “followed by the ISO 3166-2 additional characters identified for the 
> subdivision added”? Then provide the examples.
>
> Thanks, Bruce.
>
> /Any email and files/attachments transmitted with it are confidential 
> and are intended solely for the use of the individual or entity to 
> whom they are addressed. If this message has been sent to you in 
> error, you must not copy, distribute or disclose of the information it 
> contains. _Please notify Entrust immediately_ and delete the message 
> from your system./
>
> _______________________________________________
> Smcwg-public mailing list
> Smcwg-public at cabforum.org
> https://lists.cabforum.org/mailman/listinfo/smcwg-public
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20230404/bae701f1/attachment.html>