<div dir="ltr"><div>FWIW - Many years back I collected some SMIME profiles from digitally signed email into a spreadsheet.</div><div><a href="https://docs.google.com/spreadsheets/d/1iTdL4u-CgQIozsHe6I8d3aXBJB2pV9CS47w5WxGW0XQ/edit?usp=sharing">
https://docs.google.com/spreadsheets/d/1iTdL4u-CgQIozsHe6I8d3aXBJB2pV9CS47w5WxGW0XQ/edit?usp=sharing
</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Aug 5, 2020 at 2:00 PM Buschart, Rufus via Smcwg-public <<a href="mailto:smcwg-public@cabforum.org">smcwg-public@cabforum.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-374695291471064567WordSection1">
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt">Hello all!<u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt">Please find attached the end entity profiles used at Siemens for issuing S/MIME certificates. In case the document doesn’t go through the mailing list, here you find the deep-link
into our CMS: <a href="https://assets.new.siemens.com/siemens/assets/api/uuid:ee902002-51af-41cf-ac74-a18bdb4737c4/siemens-pki-ee-policy-2016.pdf" target="_blank">
https://assets.new.siemens.com/siemens/assets/api/uuid:ee902002-51af-41cf-ac74-a18bdb4737c4/siemens-pki-ee-policy-2016.pdf</a><u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Arial"><span style="font-size:10pt;font-family:"Arial",sans-serif">With best regards,<br>
Rufus Buschart<br>
<br>
Siemens AG<br>
Siemens Operations<br>
Information Technology<br>
Value Center Core Services<br>
SOP IT IN COR<br>
Freyeslebenstr. 1<br>
91058 Erlangen, Germany <br>
Tel.: +49 1522 2894134<br>
<a href="mailto:rufus.buschart@siemens.com" target="_blank"><font color="blue"><span style="color:blue">mailto:rufus.buschart@siemens.com</span></font></a><br>
<a href="http://www.twitter.com/siemens" target="_blank"><font color="blue"><span style="color:blue">www.twitter.com/siemens</span></font></a><br>
<a href="https://siemens.com/ingenuityforlife" target="_blank"><font color="blue"><span style="color:blue">www.siemens.com/ingenuityforlife</span></font></a><br>
</span></font><font size="2" face="Arial"><span style="font-size:10pt;font-family:"Arial",sans-serif"><img style="width: 2.5in; height: 0.9062in;" id="gmail-m_-374695291471064567_x0000_i1025" src="cid:173c04036dc4cdccc1" width="240" height="87" border="0"></span></font><font size="2" face="Arial"><span style="font-size:10pt;font-family:"Arial",sans-serif"><br>
</span></font><font size="1" face="Arial"><span style="font-size:8pt;font-family:"Arial",sans-serif">Siemens Aktiengesellschaft: Chairman of the Supervisory Board: Jim Hagemann Snabe; Managing Board: Joe Kaeser, Chairman, President and Chief Executive Officer;
Roland Busch, Klaus Helmrich, Cedrik Neike, Ralf P. Thomas; Registered offices: Berlin and Munich, Germany; Commercial registries: Berlin Charlottenburg, HRB 12300, Munich, HRB 6684; WEEE-Reg.-No. DE 23691322<br>
<br>
</span></font><u></u><u></u></p>
<div style="border-color:currentcolor currentcolor currentcolor blue;border-style:none none none solid;border-width:medium medium medium 1.5pt;padding:0cm 0cm 0cm 4pt">
<div>
<div style="border-color:rgb(225,225,225) currentcolor currentcolor;border-style:solid none none;border-width:1pt medium medium;padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><font size="2" face="Calibri"><span style="font-size:11pt;font-weight:bold">From:</span></font></b> Smcwg-public <<a href="mailto:smcwg-public-bounces@cabforum.org" target="_blank">smcwg-public-bounces@cabforum.org</a>>
<b><span style="font-weight:bold">On Behalf Of </span></b>Stephen Davidson via Smcwg-public<br>
<b><span style="font-weight:bold">Sent:</span></b> Montag, 3. August 2020 18:45<br>
<b><span style="font-weight:bold">To:</span></b> <a href="mailto:smcwg-public@cabforum.org" target="_blank">smcwg-public@cabforum.org</a><br>
<b><span style="font-weight:bold">Subject:</span></b> [Smcwg-public] Relevant S/MIME standards<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt">Hello all:<u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt">SMCWG members are encouraged to submit relevant standards for S/MIME certificates for the group’s consideration via the public listserv. Here are two important ones:<u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt"><u></u> <u></u></span></font></p>
<ul style="margin-top:0cm" type="disc">
<li class="gmail-m_-374695291471064567MsoListParagraph" style="margin-left:0cm"><font size="2" face="Calibri"><span style="font-size:11pt">Mozilla Root Store Policy. Particularly Section 2.2 (2) for validation of email control and Section 6.2 for S/MIME revocation
events. <a href="https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.mozilla.org%2Fen-US%2Fabout%2Fgovernance%2Fpolicies%2Fsecurity-group%2Fcerts%2Fpolicy%2F&data=02%7C01%7Crufus.buschart%40siemens.com%7C2534dabfb42c47bab68b08d837cc8f49%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C637320699010249289&sdata=I6nRmSlCluF7m5PTb2m4lLeTywJY6vAHsjc9mx1sLbI%3D&reserved=0" target="_blank">https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/</a><u></u><u></u></span></font></li><li class="gmail-m_-374695291471064567MsoListParagraph" style="margin-left:0cm"><font size="2" face="Calibri"><span style="font-size:11pt">Gmail’s acceptable S/MIME certificate profiles for end entity certs, intermediate CAs, and root CAs:
<a href="https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.google.com%2Fa%2Fanswer%2F7300887%3Fhl%3Den%26ref_topic%3D9061730&data=02%7C01%7Crufus.buschart%40siemens.com%7C2534dabfb42c47bab68b08d837cc8f49%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C637320699010259285&sdata=FQOTynqM5%2FfDcEHaWjj6tJlcU4tUmZ%2BV3H8dQ0sjmsw%3D&reserved=0" target="_blank">
https://support.google.com/a/answer/7300887?hl=en&ref_topic=9061730</a><u></u><u></u></span></font></li></ul>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt">We are interested to know if similar S/MIME certificate profiles exist in government or industry standards.<u></u><u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font size="2" face="Calibri"><span style="font-size:11pt">Regards, Stephen<u></u><u></u></span></font></p>
</div>
</div>
</div>
_______________________________________________<br>
Smcwg-public mailing list<br>
<a href="mailto:Smcwg-public@cabforum.org" target="_blank">Smcwg-public@cabforum.org</a><br>
<a href="https://lists.cabforum.org/mailman/listinfo/smcwg-public" rel="noreferrer" target="_blank">https://lists.cabforum.org/mailman/listinfo/smcwg-public</a><br>
</blockquote></div>