<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<br>
<br>
<div class="moz-cite-prefix">On 16/5/2024 2:35 μ.μ., Adriano Santoni
via Smcwg-public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0100018f812f6ad4-d5a5427c-dce5-4c4e-8abb-aff7ac1d58b1-000000@email.amazonses.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p><font face="Calibri">Dimitris,</font><br>
</p>
<div class="moz-cite-prefix">Il 16/05/2024 13:26, Dimitris
Zacharopoulos (HARICA) via Smcwg-public ha scritto:<br>
</div>
<blockquote type="cite"
cite="mid:0100018f81279e5e-4dda83a2-8d15-418e-9010-7fc60a6817db-000000@email.amazonses.com">
I think it is ok for the same CA to accept a signed (with an
existing S/MIME IV Certificate) request for renewal, coming from
an existing Subscriber, as long as the existing stored evidence
can be re-used according to the rules. </blockquote>
<p>Actually this is exactly what I had in mind: I was implicitly
referring to an already existing S/MIME IV certificate issued by
the /same/ CA from which the Applicant is requesting another
one.</p>
</blockquote>
<br>
Thanks for clarifying :)<br>
<br>
I think this is already allowed in the sense that the CA does not
directly rely on the information in the certificate used to sign the
renewal request, but corroborates with its internal database and
evidence already stored from the initial validation, checks that
this evidence has not expired and issues a new certificate. If
during this process the Applicant wants to add another email
address, depending on the evidence already collected, it may require
a new validation that can be combined with existing ones and result
in the additional email in the new certificate.<br>
<br>
I hope this makes sense to all.<br>
<br>
<br>
Dimitris.<br>
<br>
<blockquote type="cite"
cite="mid:0100018f812f6ad4-d5a5427c-dce5-4c4e-8abb-aff7ac1d58b1-000000@email.amazonses.com">
<p>Adriano</p>
<p><br>
</p>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Smcwg-public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Smcwg-public@cabforum.org">Smcwg-public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/smcwg-public">https://lists.cabforum.org/mailman/listinfo/smcwg-public</a>
</pre>
</blockquote>
<br>
</body>
</html>