[cabf_validation] Omitting the O field in IV certificates

[Jeremy Rowley]

I was working on a draft ballot previously on this but there’s a lot of changes throughout the document.  The organizationName field is tied to a lot of sections.

From: validation-bounces at cabforum.org [mailto:validation-bounces at cabforum.org] On Behalf Of Moudrick M. Dadashov
Sent: Thursday, October 22, 2015 9:32 AM
To: Ben Wilson; validation at cabforum.org
Subject: Re: [cabf_validation] Omitting the O field in IV certificates

Do you think it makes sense to harmonize the Subject info with ETSI EN 319 412-2?

Thanks,
M.D.
On 10/22/2015 6:23 PM, Ben Wilson wrote:
On today’s call we discussed the need to modify the BRs to allow CAs to omit the O field when an individual’s name appears in the certificate.

Does anyone want to draft a ballot to amend section 7.1.4.2 of the BRs, or is one already drafted?

Subsection b. should be modified.  It states, “Because Subject name attributes for individuals (e.g. givenName (2.5.4.42) and surname (2.5.4.4)) are not broadly supported by application software, the CA MAY use the subject:organizationName field to convey a natural person Subject’s name or DBA.”

Is subsection a. the place to add a provision that allows first names / given names and last names /surnames in the Common Name field?  Or do two new separate fields need to be designated?




_______________________________________________

Validation mailing list

Validation at cabforum.org<mailto:Validation at cabforum.org>

https://cabforum.org/mailman/listinfo/validation

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/validation/attachments/20151105/8a7e558b/attachment.html