[cabfpub] Ballot 148 - Issuer Field Correction
sleevi at google.com
Tue Mar 17 15:57:43 MST 2015
Forwarding for Peter
On Tue, Mar 17, 2015 at 2:56 PM, Peter Bowen <pzbowen at gmail.com> wrote:
> On Wed, Mar 11, 2015 at 4:28 PM, Doug Beattie
> <doug.beattie at globalsign.com> wrote:
> > Ballot 148 - Issuer Field Correction
> > The issuer field language in Section 9.1 of the Baseline Requirements
> > confuses two issues:
> > 1) the contents of the issuer field in an end entity cert and
> > 2) how to name root and intermediate CA certificates.
> Maybe worth an independent discussion, but the EV Guidelines also
> claim to cover subordinate CA naming in section 9.2:
> "Subject to the requirements of these Guidelines, [...] certificates
> issued to Subordinate CAs that are not controlled by the same entity
> as the CA MUST include the following information about the Subject
> organization in the fields listed"
> The Subordinate CA definition is "A Certification Authority whose
> Certificate is signed by the Root CA, or another Subordinate CA."
> Looking at the Pilot CT log, there are zero CAs who have a
> businessCategory attribute in their name, yet businessCategory is a
> required attribute in section 9.2.
> Was 9.2 really intended to apply to Subordinate CAs? Is this just
> another thing waiting for an auditor to call out and start issuing
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Public