On 30/01/17 12:51, Nick Lamb wrote: > CrossCert Certification Practice Statement Version 3.8.8 Effective > Date: JUNE 29, 2012
That date is interesting. The BRs require CPSes to be revised yearly. > "End-user Subscriber Certificates contain an X.501 distinguished name > in the Subject name field and consist of the components specified in > Table 5 below." > > Table 5 in CPS 3.8.8 says that the attribute Country (C) shall have > the value “KR” or not used. That seems reasonably conclusive on the face of it. I'm sure Steve will have noted this point and I hope he will address it in any further update on the CrossCert situation. Gerv _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy