[cabfpub] [EXTERNAL]Re: streetAddress

Kirk Hall Kirk.Hall at entrustdatacard.com
Thu May 18 18:33:51 UTC 2017

While I don’t feel strongly about it, it seems to me the term “streetAddress” is different than the word “Address”, and normally would not include city, state, or country.  Just the address on the street.

From: Public [mailto:public-bounces at cabforum.org] On Behalf Of Adriano Santoni via Public
Sent: Wednesday, May 17, 2017 11:26 PM
To: Geoff Keating <geoffk at apple.com>; CA/Browser Forum Public Discussion List <public at cabforum.org>
Cc: Adriano Santoni <adriano.santoni at staff.aruba.it>
Subject: [EXTERNAL]Re: [cabfpub] streetAddress

Here is an example:       (please note: it's a fake one, generated via an on-line fake address generator)

STREET=38, Place Charles de Gaulle, 76600 Le Havre, France
L=Le Havre
In the above example, streetAddress not only contains a street name and house number, but other info as well, including the locality (already specified in the separate localityName attribute) and the country (already specified in the separate countryName attribute), and a postal code that should probably be moved elsewhere (e.g. in the specific postalCode attribute, if used).

It is quite obvious, in the above example, that the address information are consistent, overall. The question I am asking is: is this way of populating streetAddress okay, from a compliance point of view?

Does anybody think that such a certificate should be regarded as non-conformant to the BRs ?


Il 18/05/2017 00:04, Geoff Keating ha scritto:

On 17 May 2017, at 3:08 am, Adriano Santoni via Public <public at cabforum.org<mailto:public at cabforum.org>> wrote:

All, would like some opinions about the following question:
Can it be considered "okay" if the streetAddress component of an OV (or EV) certificate Subject contains some more information than it's strictly specified (or, more exactly, exemplified) in ITU-T X.520 ?

ITU-T X.520 (aka ISO/IEC 9594-6) reads:
"The Street Address attribute type specifies a site for the local distribution and physical delivery in a postal address,
i.e., the street name, place, avenue and house number"

For instance, how would you consider a street Address that, in addition to street name and house number, also contains a country name: compliant? non-compliant? of dubious compliance?

Can you give an example?

I think the most likely outcome is that the address is simply wrong—not non-compliant, but not referring to the intended or actual address.

In many cases with complex or weird postal addresses, it is probably preferable to use the postalAddress component instead, which gives you 6 lines (alas limited to 30 characters each).


Cordiali saluti,

Adriano Santoni
(Aruba Group)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170518/02668d6c/attachment-0003.html>

More information about the Public mailing list