<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p><font face="Calibri">I believe there is an inconsistency between
section 3.2.3.1 (Attribute collection of organization identity)
and section 7.1.4.2.2 (</font><font face="Calibri">Subject
distinguished name fields</font><font face="Calibri">).</font></p>
<p><font face="Calibri">In </font><font face="Calibri">3.2.3.1 </font><font
face="Calibri">it is specified that "The CA or RA SHALL collect
and retain evidence supporting the following identity attributes
for the Organization"<br>
</font></p>
<p><font face="Calibri">and the list of identity attributes include
"3. An organizational unit of the Legal Entity (if included in
the Subject);"</font></p>
<p><font face="Calibri">This cannot be left written that way, IMO,
because </font><font face="Calibri">according to §</font><font
face="Calibri">7.1.4.2.2 </font><font face="Calibri">organizational
units (properly speaking) cannot be included in certificates</font><font
face="Calibri">.</font></p>
<p><font face="Calibri">In fact, section 7.1.4.2.2 (Subject
distinguished name fields) reads like follows regarding the
organizationalUnitName attribute:</font></p>
<p><font face="Calibri">"If present, the CA SHALL confirm that the
subject:organizationalUnitName is the full legal organization
name of an Affiliate of the subject:organizationName"</font></p>
<p><font face="Calibri">So, if present, the </font><font
face="Calibri">organizationalUnitName attribute cannot really
contain the name of an organizational unit (e.g. department,
division, etc.) but only the name of an Affiliate organization,
which is quite a different thing.<br>
</font></p>
<p><font face="Calibri">To sum up, I believe that we should either
remove item #3 from the list in </font><font face="Calibri">3.2.3.1
</font><font face="Calibri"> or reword it to make it consistent
with 7.1.4.2.2 letter c).<br>
</font></p>
<p><font face="Calibri">Do people agree?<br>
</font></p>
<p><font face="Calibri">Adriano</font></p>
<p><font face="Calibri"><br>
</font></p>
</body>
</html>