Skip to content
This repository has been archived by the owner on Jun 19, 2020. It is now read-only.

E: EV certificates must include localityName in subject - only true if stateOrProvinceName is absent #65

Open
Santhanraj opened this issue May 24, 2018 · 0 comments · May be fixed by #66

Comments

@Santhanraj
Copy link
Contributor

Santhanraj commented May 24, 2018

This shouldn't be an error since localtyName is optional when stateOrProvinceName is present (since EV ver 1.6.4 and ballot 191)

E.g., https://crt.sh/?id=466655384&opt=cablint

BR: 7.1.4.2.2 (e)
Certificate Field: subject:localityName (OID: 2.5.4.7)
Required if the subject:organizationName field, subject:givenName field, or subject:surname field are present and the subject:stateOrProvinceName field is absent.
Optional if the subject:stateOrProvinceName field and the subject:organizationName field, subject:givenName field, or subject:surname field are present.
Prohibited if the subject:organizationName field, subject:givenName, and subject:surname field are absent.

Santhanraj pushed a commit to Santhanraj/certlint that referenced this issue May 29, 2018
Since EV ver 1.6.4 and ballot 191, localityName is optional if stateOrProvinceName is present. 

Closes amazon-archives#65
@Santhanraj Santhanraj linked a pull request May 29, 2018 that will close this issue
robstradling pushed a commit to certlint/certlint that referenced this issue May 15, 2020
Since EV ver 1.6.4 and ballot 191, localityName is optional if stateOrProvinceName is present. 

Closes amazon-archives#65
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant