Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SC47 Sunset subject:organizationalUnitName (#282) #290

Merged
merged 4 commits into from
Aug 16, 2021
Merged

SC47 Sunset subject:organizationalUnitName (#282) #290

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
aed7cca
SC47 Sunset subject:organizationalUnitName (#282)
vanbroup Jul 7, 2021
a902c40
SC47 Sunset subject:organizationalUnitName (#282)
vanbroup Jul 7, 2021
4287ba5
Merge branch 'SC47' of github.com:cabforum/servercert into SC47
Aug 16, 2021
b95a0ae
Update version and docs table
Aug 16, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions docs/BR.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
---
title: Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates
subtitle: Version 1.7.8
subtitle: Version 1.7.9
author:
- CA/Browser Forum
date: 13 July, 2021
date: 16 August, 2021
copyright: |
Copyright 2021 CA/Browser Forum

Expand Down Expand Up @@ -121,6 +121,7 @@ The following Certificate Policy identifiers are reserved for use by CAs as an o
| 1.7.6 | SC44 | Clarify Acceptable Status Codes | 30-Apr-2021 | 3-Jun-2021 |
| 1.7.7 | SC46 | Sunset the CAA Exception for DNS Operator | 2-Jun-2021 | 12-Jul-2021 |
| 1.7.8 | SC45 | Wildcard Domain Validation | 2-Jun-2021 | 13-Jul-2021 |
| 1.7.9 | SC47 | Sunset subject:organizationalUnitName | 30-Jun-2021 | 16-Aug-2021 |

\* Effective Date and Additionally Relevant Compliance Date(s)

Expand Down Expand Up @@ -2106,7 +2107,8 @@ h. __Certificate Field:__ `subject:countryName` (OID: 2.5.4.6)
__Contents:__ If the `subject:organizationName` field is present, the `subject:countryName` MUST contain the two-letter ISO 3166-1 country code associated with the location of the Subject verified under [Section 3.2.2.1](#3221-identity). If the `subject:organizationName` field is absent, the `subject:countryName` field MAY contain the two-letter ISO 3166-1 country code associated with the Subject as verified in accordance with [Section 3.2.2.3](#3223-verification-of-country). If a Country is not represented by an official ISO 3166-1 country code, the CA MAY specify the ISO 3166-1 user-assigned code of XX indicating that an official ISO 3166-1 alpha-2 code has not been assigned.

i. __Certificate Field:__ `subject:organizationalUnitName` (OID: 2.5.4.11)
__Required/Optional:__ __Optional__.
__Required/Optional:__ __Deprecated__.
__Prohibited__ if the `subject:organizationName` is absent or the certificate is issued on or after September 1, 2022.
__Contents__: The CA SHALL implement a process that prevents an OU attribute from including a name, DBA, tradename, trademark, address, location, or other text that refers to a specific natural person or Legal Entity unless the CA has verified this information in accordance with [Section 3.2](#32-initial-identity-validation) and the Certificate also contains `subject:organizationName`, `subject:givenName`, `subject:surname`, `subject:localityName`, and `subject:countryName` attributes, also verified in accordance with [Section 3.2.2.1](#3221-identity).

j. Other Subject Attributes
Expand Down
7 changes: 4 additions & 3 deletions docs/EVG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
---
title: Guidelines for the Issuance and Management of Extended Validation Certificates
subtitle: Version 1.7.6
subtitle: Version 1.7.7
author:
- CA/Browser Forum
date: 2 June, 2021
date: 16 August, 2021
copyright: |
Copyright 2021 CA/Browser Forum

Expand Down Expand Up @@ -68,6 +68,7 @@ The CA/Browser Forum is a voluntary open organization of certification authoriti
| 1.7.4 | SC35 | Cleanups and Clarifications | 9-Sep-2020 | 19-Oct-2020 |
| 1.7.5 | SC41 | Reformatting the BRs, EVGs, and NCSSRs | 24-Feb-2021 | 5-Apr-2021 |
| 1.7.6 | SC42 | 398-day Re-use Period | 22-Apr-2021 | 2-Jun-2021 |
| 1.7.7 | SC47 | Sunset subject:organizationalUnitName | 30-Jun-2021 | 16-Aug-2021 |

\* Effective Date and Additionally Relevant Compliance Date(s)

Expand Down Expand Up @@ -514,7 +515,7 @@ __Contents__: This field MUST contain the address of the physical location of th
### 9.2.7. Subject Organizational Unit Name Field

__Certificate Field__: `subject:organizationalUnitName` (OID: 2.5.4.11)
__Required/Optional__: Optional
__Required/Optional/Prohibited:__ As stated in Section 7.1.4.2.2 i of the Baseline Requirements.
__Contents__: The CA SHALL implement a process that prevents an OU attribute from including a name, DBA, tradename, trademark, address, location, or other text that refers to a specific natural person or Legal Entity unless the CA has verified this information in accordance with [Section 11](#11-verification-requirements). This field MUST NOT contain only metadata such as '.', '-', and ' ' (i.e. space) characters, and/or any other indication that the value is absent, incomplete, or not applicable.

### 9.2.8. Subject Organization Identifier Field
Expand Down