[Servercert-wg] Example certificates: Alternative registration numbers for EV certificates

Tomas Gustavsson tomas.gustavsson at primekey.com
Wed May 15 13:53:20 MST 2019


Hi,

With voting going on I wanted to try to create some test certs with the
new extension. You can verify if this is the intended encoding. I
created one with and one without the optional element.

This is the simple BouncyCastle code:

ASN1EncodableVector v = new ASN1EncodableVector();
v.add(new DERPrintableString("NTR"));
v.add(new DERPrintableString("US"));
v.add(new DERTaggedObject(false, 0, new DERPrintableString("CA")));
v.add(new DERUTF8String("12345678"));
ASN1Sequence seq = new DERSequence(v);

Regards,
Tomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cabf-orgid-nostate.pem
Type: application/x-x509-ca-cert
Size: 2297 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190515/6fc6062a/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cabf-orgid-withstate.pem
Type: application/x-x509-ca-cert
Size: 2301 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190515/6fc6062a/attachment-0003.bin>


More information about the Servercert-wg mailing list