[cabfpub] Ballot 148 - Issuer Field Correction

Gervase Markham gerv at mozilla.org
Fri Mar 13 12:21:58 MST 2015


On 11/03/15 16:28, Doug Beattie wrote:
> "9.1 Issuer Information
> 
> The content of the Certificate Issuer Distinguished Name field MUST
> match the Subject DN of the Issuing CA to support Name chaining as
> specified in RFC 5280, section 4.1.2.4. Only in the event of a
> self-signed root will the issuer and subject fields be identical."

Are you not here saying that Li Chun's intermediate certificate (the
lower of the right hand pair of blue ones, if people remember his
diagram, the one which links his intermediate through to his old root)
is not BR-compliant? It has identical subject and issuer, but is not a
self-signed root.

Gerv


More information about the Public mailing list