[Servercert-wg] Clarification about EVG 9.2.4

[Dimitris Zacharopoulos (HARICA)]

On 2019-12-02 7:22 μ.μ., Jeremy Rowley wrote:
>
> Your interpretation matches mine. You only include the state/locality 
> combo if the state regulates registration of the entities at the local 
> level.
>

Thanks Jeremy,

 From this interpretation it seems we have the following two clear cases 
for Organizations that register at the Locality level:

 1. Registration is generally allowed to be done at a State or Province
    level (but the Organization does not choose or may not be allowed to
    use that level), and at the Locality level under that State or Province.
 2. Registration is not an option (for all Organizations) at a State or
    Province level, but only at the Locality level.

For the first case, JoI-countryName, JoI-stateOrProvinceName and 
JoI-localityName MUST be included.

For the second case, JoI-countryName and JoI-localityName MUST be 
included. JoI-stateOrProvinceName MUST NOT be included.

Is this accurate?


Dimitris.

> *From:* Servercert-wg <servercert-wg-bounces at cabforum.org> *On Behalf 
> Of *Dimitris Zacharopoulos (HARICA) via Servercert-wg
> *Sent:* Monday, December 2, 2019 10:02 AM
> *To:* CA/B Forum Server Certificate WG Public Discussion List 
> <servercert-wg at cabforum.org>
> *Subject:* [Servercert-wg] Clarification about EVG 9.2.4
>
>
> Dear members,
>
> I would like to ask for a clarification/interpretation about section 
> 9.2.4 of the EV Guidelines and please forgive me if this has been 
> discussed in the past.
>
>
>       9.2.4. Subject Jurisdiction of Incorporation or Registration Field
>
> "*Contents:* These fields MUST NOT contain information that is not 
> relevant to the level of the Incorporating Agency or Registration 
> Agency. For example, the Jurisdiction of Incorporation for an 
> Incorporating Agency or Jurisdiction of Registration for a 
> Registration Agency that operates at the country level MUST include 
> the country information but MUST NOT include the state or province or 
> locality information. Similarly, the jurisdiction for the applicable 
> Incorporating Agency or Registration Agency at the state or province 
> level MUST include both country and state or province information, but 
> MUST NOT include locality information. And, the jurisdiction for the 
> applicable Incorporating Agency or Registration Agency at the locality 
> level MUST include the country and state or province information, 
> where the state or province regulates the registration of the entities 
> at the locality level, as well as the locality information. Country 
> information MUST be specified using the applicable ISO country code. 
> State or province or locality information (where applicable) for the 
> Subject's Jurisdiction of Incorporation or Registration MUST be 
> specified using the full name of the applicable jurisdiction."
>
> Is it allowed to include a /subject:jurisdictionLocalityName/ without 
> providing a /subject:jurisdictionStateOrProvinceName/?
>
> The requirement says "And, the jurisdiction for the applicable 
> Incorporating Agency or Registration Agency at the locality level MUST 
> include the country and state or province information, where the state 
> or province regulates the registration of the entities at the locality 
> level, as well as the locality information."
>
> In one interpretation, if there is no "state or province" that 
> regulates the registration of entities but this registration is done 
> at the locality level, then the 
> /subject:jurisdictionStateOrProvinceName/ can be omitted and only the 
> /subject:jurisdictionLocalityName/ is included along with the 
> /subject:jurisdictionCountryName/. Is this an accurate and valid 
> interpretation?
>
>
> Thank you,
> Dimitris.
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20191202/b7f32a35/attachment.html>