[Servercert-wg] [EXTERNAL] State or Province

[Robin Alden]

Publicly documenting every deviation from ISO3166-2 sounds OK, but I think carries an unspoken assumption that the deviations will be rare.
I suspect the deviations will not be rare, for some countries.
Frequent deviations make the documentation of those deviations less useful, if we do it certificate by certificate.

Perhaps instead of documenting every certificate issued with a non-ISO3166-2 stateOrProvince, the public document should instead list the values that the CA accepts:
“BR x.x.x.x declaration on subject:stateOrProvince value validation
Name of CA organization: XYZ CA
CPS URI: …
CPS URI: …
For stateOrProvince values we use only:
ISO-3166-2
+For country=GB
Historic Counties
<List>
Former Postal Counties
<List>
+For country=CH
Subdivision names in English
<List>
+For country=TW
TW National standard subdivision list
<List>
Etc...”

Regards
Robin Alden
Sectigo Limited
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7461 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/servercert-wg/attachments/20190916/147e7b74/attachment.p7s>