[Servercert-wg] State or Province

[Tim Hollebeek]

It has come to my attention that the current baseline requirements are
rather unclear about what is a valid state or province
(subject:stateOrProvinceName [OID: 2.5.4.8]).  Lots of countries have what
are effectively states or provinces, they just call them something else.

 

In order to provide bright, clear lines that everyone can comply with, it
would be useful to point to an existing standard, and ISO 3166-2 seems like
just the thing to point to.  Hopefully the ISO folks have already figured
out all the crazy, weird corner cases for us.

 

Does anyone have a good reason why stateOrProvinceName should NOT be
required to comply with ISO 3166-2?  Other comments or concerns?

 

-Tim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190903/25c9294a/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4940 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190903/25c9294a/attachment.p7s>