[cabf_validation] Omitting the O field in IV certificates

Ben Wilson ben.wilson at digicert.com
Thu Oct 22 08:23:29 MST 2015


On today's call we discussed the need to modify the BRs to allow CAs to omit
the O field when an individual's name appears in the certificate.  

 

Does anyone want to draft a ballot to amend section 7.1.4.2 of the BRs, or
is one already drafted?  

 

Subsection b. should be modified.  It states, "Because Subject name
attributes for individuals (e.g. givenName (2.5.4.42) and surname (2.5.4.4))
are not broadly supported by application software, the CA MAY use the
subject:organizationName field to convey a natural person Subject's name or
DBA."

 

Is subsection a. the place to add a provision that allows first names /
given names and last names /surnames in the Common Name field?  Or do two
new separate fields need to be designated? 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/validation/attachments/20151022/83d42e34/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4954 bytes
Desc: not available
Url : https://cabforum.org/pipermail/validation/attachments/20151022/83d42e34/attachment.bin 


More information about the Validation mailing list