I've just double-checked what I've said in my last posting, and I'm wrong on
at least two counts (probably more).
According to Thawte (and it probably isn't much different for anyone else).

1. The "State" within an SSL certificate must be an actual place, it cannot
be a postcode. This is annoying to UK users as some places do change county.

There are of course several "unitary" authorities who cannot be considered
to be in a county. For example, when entering Bristol you'll see "Welcome to
the City and County of Bristol" on the signs (ie, it isn't in Avon anymore).
I've yet to hear whether we are OK to use Peterborough as both City and
State. When I do I'll let the list know.

2. You can amend your CSR before the certificate is issued. Once the
certificate is issued you would then have to start the process again, ie pay
twice.

Sorry if I've messed up your CSR!

- 
John Airey
Internet Systems Support Officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] 

> -----Original Message-----
> From: matt [mailto:[EMAIL PROTECTED]]
> Sent: 10 July 2001 18:01
> To: [EMAIL PROTECTED]
> Subject: Creating a UK CSR
> 
> 
> Hey All,
> 
> Just a quickie on UK certs. Can I just leave state blank, and use
> London for locality, or should I use London for both?
> 
> Also GB is the correct ISO country code right?
> 
> Thanks,
> 
> Matt
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to