[cabfpub] [EXTERNAL] Require commonName in Root and Intermediate Certificates ballot draft

Gervase Markham gerv at mozilla.org
Mon Apr 3 18:13:33 UTC 2017


On 28/03/17 16:21, Ben Wilson via Public wrote:
> I agree with Bruce.  There are instances where a new subCA certificate
> is issued  for the same key pair but with a different serial number and
> different validity dates, etc.  I would replace “certificate” with
> “subject” and in front of “certificates” I would insert “subjects
> issued” so that it reads “This field MUST be present and the contents
> MUST be an identifier for the subject of the certificate which is unique
> across all subjects issued certificates by the issuing certificate.”

"which is unique across all subjects issued certificates" doesn't quite
parse as English... Is that exactly what you intended?

Gerv



More information about the Public mailing list