[Smcwg-public] OrganizationIdentifier for Gov and Treaty Orgs

[Martijn Katerbarg]

Should we at least subject:countryName to be present in these specific cases? 

 

Otherwise, we could end up having certificates with a subject looking like this (OV):

 

subject:organizationName: Ministry of Finance

 

This leaves no way of telling for which country and entity this is. Possibly the email address tld could tell someone, but that shouldn’t be relied upon.

I’ve done a comparison with EV certificates. There are currently EV certificates out there with O=Ministry of Finance and SN=Government Entity, spanning 12 different country codes.

 

 

From: Smcwg-public <smcwg-public-bounces at cabforum.org> On Behalf Of Stephen Davidson via Smcwg-public
Sent: Thursday, 4 August 2022 16:49
To: smcwg-public at cabforum.org
Subject: [Smcwg-public] OrganizationIdentifier for Gov and Treaty Orgs

 

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

 

Hello:

 

In recent calls the group discussed that some Government and International Organization entities may not have identifiers.

It was agreed to adopt a similar workaround to that provided in the EV Guidelines.

I have added text implementing that change as seen at https://github.com/cabforum/smime/pull/158/files <https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fcabforum%2Fsmime%2Fpull%2F158%2Ffiles&data=05%7C01%7Cmartijn.katerbarg%40sectigo.com%7C0f411c93c7404dfc94a008da76288a32%7C0e9c48946caa465d96604b6968b49fb7%7C0%7C0%7C637952213783726589%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=MZM2OTOjk5dUNo52UbgMZKk%2B5OSnE5l9SZvf7L0tYi8%3D&reserved=0> 

 

Regards, Stephen

 

 

Stephen Davidson 

Governance, Risk & Compliance
stephen.davidson at digicert.com <mailto:stephen.davidson at digicert.com> 

O 1.441.278.2803 | M 1.441.505.4908



 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20220805/3af407a2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 4581 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20220805/3af407a2/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6827 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/smcwg-public/attachments/20220805/3af407a2/attachment-0001.p7s>