[cabfpub] (SPAM) Re: Suggestion to amend BR Section7.1.4.2.2d/e RE: EV Gudelines section 9.2.5 & X.520

[Erwann Abalea]

A small mistake here.
Where I wrote C=UK, read C=GB.
Country code UK cannot be used, code GB must be used instead.
Even if technically speaking, Great Britain doesn’t include Northern Ireland.

Cordialement,
Erwann Abalea

Le 15 juil. 2016 à 20:25, Erwann Abalea <Erwann.Abalea at docusign.com<mailto:Erwann.Abalea at docusign.com>> a écrit :

Bonjour Li-Chun,

That’s a long email. To avoid make it even longer, I propose to split it in several parts; that should help keep a manageable size.

I’ll start with the end, because why not?

You want to have special rules for small countries where ST or L is not available, and provide a list of such small countries in Note 2.
That’s in fact a list of ISO3166-1 codes. Not all of them are actual country codes (ISO3166-1 lists country and territories) and are suitable for use in DV/OV/EV certificates (see the definition of an acceptable country code in the BR).
Among them:

  *
  *   GF, GP, MQ, YT, RE are regions and departments of France (C=FR, and you can put their name into the stateOrProvinceName attribute), and they are even composed of cities (we have 6 administrative subdivision levels in France, with more than 36000 cities, we’re crazy)
  *   BV and SJ belong to Norway (C=NO), you can certainly put their name into the stateOrProvinceName attribute
  *   FK, GI, GS, PN, VG are British Overseas Territories (some are disputed either by Argentina or Spain, but still, C=UK)
  *   CX and NF are Australian territories (C=AU)
  *   FO is a constituent country of Denmark (C=DK), exactly like Scotland wrt UK
  *   GU is a non incorporated territory of the United States of America (C=US), just like Porto Rico
  *   GG, IM, JE are Crown dependancies, can possibly be considered as countries (C=GG/IM/JE), but anyway have administrative subdivisions
  *   LB, ME, MK, SI (not SVN) are countries, and have administrative subdivisions (localities, and a second level for LB)
  *   RS is a country (C=RS), has districts and localities, part of its province is Kosovo, a self-proclaimed country recognized by at least 2 UN members (C=XX is acceptable, as well as C=RS for this province)
  *   PS is in an unsatisfying situation, but anyway is recognized by at least 2 UN members, so C=PS is good, and this country has 2 levels of administrative subdivisions
  *   EH is a self-proclaimed country, disputed by Morocco, but recognized by at least 2 UN members, so C=EH is good, and this country has several localities
  *   SG is of course a country, but also a city, is composed of 64 islands, I don’t know if it’s possible to have their name in an attribute
  *   TW is a complicated story (with China), but this country is recognized by at least 2 UN members, so C=TW is fine; this country has administrative subdivisions
  *   VA is weird, not completely a sovereign state (its UN representation is the Holy See — and not Vatican), more like an international organization like UN; there’s no Vatican nationality; C=VA is possibly invalid
  *   AN is not to be used again until december 2061, replaced by CW/SX/BQ, their status is unclear
  *   NU is also unclear (is it part of NZ or UK, or an autonomous country?), anyway it has subdivisions (localities)

That leaves SG as possibly ST/L problematic (but « C=SG, L=Singapore » is fine), and CW/SX/BQ have to be reviewed. Is it really necessary to have exceptions?

Cordialement,
Erwann Abalea


-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20160718/59d3dc85/attachment.html