[cabf_validation] Omitting the O field in IV certificates

Jeremy Rowley jeremy.rowley at digicert.com
Wed Nov 4 17:45:00 MST 2015

I was working on a draft ballot previously on this but there’s a lot of changes throughout the document.  The organizationName field is tied to a lot of sections.

From: validation-bounces at cabforum.org [mailto:validation-bounces at cabforum.org] On Behalf Of Moudrick M. Dadashov
Sent: Thursday, October 22, 2015 9:32 AM
To: Ben Wilson; validation at cabforum.org
Subject: Re: [cabf_validation] Omitting the O field in IV certificates

Do you think it makes sense to harmonize the Subject info with ETSI EN 319 412-2?

On 10/22/2015 6:23 PM, Ben Wilson wrote:
On today’s call we discussed the need to modify the BRs to allow CAs to omit the O field when an individual’s name appears in the certificate.

Does anyone want to draft a ballot to amend section of the BRs, or is one already drafted?

Subsection b. should be modified.  It states, “Because Subject name attributes for individuals (e.g. givenName ( and surname ( are not broadly supported by application software, the CA MAY use the subject:organizationName field to convey a natural person Subject’s name or DBA.”

Is subsection a. the place to add a provision that allows first names / given names and last names /surnames in the Common Name field?  Or do two new separate fields need to be designated?


Validation mailing list

Validation at cabforum.org<mailto:Validation at cabforum.org>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/validation/attachments/20151105/8a7e558b/attachment.html 

More information about the Validation mailing list