On 21/03/17 10:51, Jeremy Rowley via Public wrote: > Despite the discussion today, I’m still not clear on why the cert can’t > include locality information. The short answer to this question is: a) they want to use their existing X509 names, which don't include it b) it's safe to not include it, because the entities concerned have all-Taiwan-unique names Gerv