[cabfpub] Pre-Ballot 208 dnQualifiers

[Ben Wilson]

Here is another pre-ballot proposed by Peter Bowen and endorsed by me and
Ryan Sleevi.

Ballot 208 - dnQualifiers 

In the Baseline Requirements, REPLACE the definition of "Subject Identity
Information" with: 

"Information that identifies the Certificate Subject. Subject Identity
Information does not include dnQualifier attributes in Distinguished Names,
commonName attributes in Distinguished Names, dNSName Subject Alternative
Names, iPAddress Subject Alternative Names, or SRVName Subject Alternative
Names." 

In Section 7.1.4.2.2 Subject Distinguished Name Fields, re-letter "j" (Other
Subject Attributes) as letter "k" and INSERT a new subsection j. that reads:


j. Certificate Field: subject:dnQualifier 

*	Optional. Contents: This field is intended to be used when several
certificates with the same subject can be partitioned into sets of related
certificates. Each related certificate set MAY have the same dnQualifier.
The CA may include a dnQualifier attribute with a zero length value to
explicitly indicate that the CA makes no assertion about relationship with
other certificates with the same subject. The CA MAY set the dnQualifer
value to the base64 encoding of the SHA1 hash of the subjectAlternativeName
extnValue if it wishes to indicate grouping of certificates by alternative
name set. 

 

 

 

Ben Wilson, JD, CISA, CISSP

VP Compliance

+1 801 701 9678



 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/public/attachments/20170725/4d2d5fe8/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 6101 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/public/attachments/20170725/4d2d5fe8/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pre-ballot-208-dnQualifier.pdf
Type: application/pdf
Size: 227915 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/public/attachments/20170725/4d2d5fe8/attachment-0001.pdf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4974 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/public/attachments/20170725/4d2d5fe8/attachment-0001.p7s>