[cabfpub] SAN private extensions pursuant specific SSL/EV Spanish ruled profile

Chema Lopez clopez at firmaprofesional.com
Wed Jun 29 17:33:48 UTC 2016

Dear all.

There was a law in Spain that regulates the profile for some specific
certificates, i.e.:

   1. Civil Servant or Public Employee (natural person certificate)
   2. Electronic Seal for Automated Administrative Action
   3. Electronic Office Certificate (SSL or EV for Public Administrations)

You can find the profiles attached (unfortunately only in Spanish).

The problem is that these profiles required private extensions in the SAN,
and this conflicts BR and EV Guidelines. At least, crt.sh shows this
extensions as an error. See the private extensions below.
[image: Inline images 1]

This law has been repealed recently and the new one does not require this
extensions but, how do we, Spanish TSP, handle the SSL and EV certificates
issued following the previous law? In my opinion, an exception needs to be

Thanks in advance for your comments.

Best regards,

*Chema López GonzálezDirector Área de Innovación, Cumplimiento y
TecnologíaAC Firmaprofesional S.A.*

Av. Torre Blanca, 57.

08173 Sant Cugat del Vallès. Barcelona.
Tel: 93.477.42.45 / 666.429.224

El contenido de este mensaje y de sus anexos es confidencial. Si no es el
destinatario, le hacemos saber que está prohibido utilizarlo, divulgarlo
y/o copiarlo sin tener la autorización correspondiente. Si ha recibido este
mensaje por error, le agradeceríamos que lo haga saber inmediatamente al
remitente y que proceda a destruir el mensaje.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160629/0610521d/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 108239 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160629/0610521d/attachment-0002.png>

More information about the Public mailing list