Moved deprecated/hidden text out of AP into X509 document and wiki page.
git-svn-id: http://svn.cacert.org/CAcert/Policies@912 14b1bab8-4ef6-0310-b690-991c95c89dfd
This commit is contained in:
parent
c6dba8bd4d
commit
12957646dd
2 changed files with 124 additions and 146 deletions
|
@ -186,149 +186,6 @@ different language or country variations,
|
||||||
and transliterations of characters in a name.
|
and transliterations of characters in a name.
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
|
||||||
<!--
|
|
||||||
FOLLOWING GOES TO ASSURER HANDBOOK
|
|
||||||
<h3><a name=""> </a>Comparison of names</h3>
|
|
||||||
<p><a href="http://en.wikipedia.org/wiki/Transliteration" target="_blank">Transliteration</a>
|
|
||||||
of characters as defined in the transliteration character table (<a href="http://svn.cacert.org/CAcert/Policies/transtab.utf" target="_blank">UTF
|
|
||||||
Transtab</a>) for names is permitted, but the result must be
|
|
||||||
7-bit
|
|
||||||
ASCII for the full name. Transliteration is one way and is towards
|
|
||||||
7-bit ASCII. Transliteration is a way to compare two names. However
|
|
||||||
transliteration of a Name makes the Name less discriminative.</p>
|
|
||||||
<p>In general names are handled case insensitively.</p>
|
|
||||||
<p>Abbreviation of second given name(s), middle name(s),
|
|
||||||
titles and name extensions in the name of an individual to one
|
|
||||||
character and the dot indicating the abbreviation, is permitted. If
|
|
||||||
the first given name in the ID document is abbreviated, the first
|
|
||||||
given name in the web account Name may be abbreviated. Abbreviation
|
|
||||||
of a name makes the name less discriminative.</p>
|
|
||||||
<p>A Name on an ID which has initials (abbreviations) for
|
|
||||||
titles, name extensions and given names, and/or transliterations as
|
|
||||||
defined in the transliteration table can be taken into account for
|
|
||||||
assurance for a Name in the account which is not abbreviated or
|
|
||||||
transliterated.</p>
|
|
||||||
<p>Titles and name extensions in the name of an individual
|
|
||||||
may be omitted.</p>
|
|
||||||
<p>The assurance ambition is to pursue
|
|
||||||
a highly discriminative assured Name in the account. The ambition is
|
|
||||||
to have only a Name in the account which has no abbreviation(s), no
|
|
||||||
transliteration and is case sensitive.</p>
|
|
||||||
|
|
||||||
FOLLOWING GOES TO Certficate Implementation Policy
|
|
||||||
<h3><a name=""> </a>Names on the certificate issued by CAcert</h3>
|
|
||||||
<p>The Certificate Implementation Policy (<a href="http://svn.cacert.org/CAcert/Policies/CertificateImplementationPolicy.html" target="_blank">CIP</a>)
|
|
||||||
will define the fields added by CAcert on the issued certificate on
|
|
||||||
request of the Member.</p>
|
|
||||||
<p>The Common Name and related certificate fields in the
|
|
||||||
issued certificate is dependent on the assurance of the Name in the
|
|
||||||
web account. Abbreviation and transliteration handling in the CN is
|
|
||||||
defined in the Certificate Implementation Policy and is similar to
|
|
||||||
the name comparison as defined in this policy. However the Common
|
|
||||||
Name may become less discriminative as than
|
|
||||||
the assured Name as the unique certificate serial number will lead to
|
|
||||||
the account of the individual in a unique way, and in this way to the
|
|
||||||
Name and email address of the individual or organisation. The first
|
|
||||||
given name in the Common Name may be abbreviated on request.</p>
|
|
||||||
<p>The certificate issued by CAcert can have on request of
|
|
||||||
the Member the SubjAltName field. The name as defined by the Member
|
|
||||||
is not checked by CAcert.</p>
|
|
||||||
<table border="1" cellpadding="2" cellspacing="0">
|
|
||||||
<tbody>
|
|
||||||
<tr>
|
|
||||||
<th width="25%">
|
|
||||||
<p><i>name on the ID</i></p>
|
|
||||||
</th>
|
|
||||||
<th width="25%">
|
|
||||||
<p><i>assured Name in the account</i></p>
|
|
||||||
</th>
|
|
||||||
<th width="25%">
|
|
||||||
<p><i>name in the certificate request</i></p>
|
|
||||||
</th>
|
|
||||||
<th width="25%">
|
|
||||||
<p><i>name on the issued certificate</i></p>
|
|
||||||
</th>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td>
|
|
||||||
<p>Maria Kate Märvel-Java </p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>Maria K. Maervel-Java</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>M. K. Märvel-Java</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>Maria K. Maervel-Java</p>
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td>
|
|
||||||
<p>prof. dr. John K. Marvel</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>John K. Marvel</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>John K. Marvel</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>John K. Marvel</p>
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td>
|
|
||||||
<p>Moeria Koete v. Java</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>Möria Kœté von Java</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>Möria K. v. Java</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>Möria K. v. Java</p>
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td>
|
|
||||||
<p>Jamé de Häring sr</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>Jame de Haering</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>J. d. Häring</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>J. d. Haering</p>
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td>
|
|
||||||
<p>Jame d. Haering sr</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>dr Jamé de Häring</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>John de Haering</p>
|
|
||||||
</td>
|
|
||||||
<td>
|
|
||||||
<p>dr Jamé de Häring</p>
|
|
||||||
</td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
<p align="center"><font size="2">table
|
|
||||||
Examples of names in
|
|
||||||
different contexts</font></p>
|
|
||||||
-->
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
<h3><a name="2.3">2.3.</a> Status and Capabilities</h3>
|
<h3><a name="2.3">2.3.</a> Status and Capabilities</h3>
|
||||||
<p>
|
<p>
|
||||||
A Name which has reached
|
A Name which has reached
|
||||||
|
|
|
@ -34,9 +34,16 @@ type="value" (e.g. "CN=Saskia the Mystical/emailAddress=sky@limit.net") on the i
|
||||||
Subject and SubjectAlternativeName may be used in the Certificate Signing Request (CSR) sent to CAcert.
|
Subject and SubjectAlternativeName may be used in the Certificate Signing Request (CSR) sent to CAcert.
|
||||||
CAcert will use this information as well information checked from assurances and other means to assemble the Subject and SubjectAlternativeName records.
|
CAcert will use this information as well information checked from assurances and other means to assemble the Subject and SubjectAlternativeName records.
|
||||||
</p>
|
</p>
|
||||||
<P>
|
<h3>
|
||||||
Other documents: RFC 3039 Qualified Certificate Profile.
|
0.1 Other Documents
|
||||||
</p>
|
</h3>
|
||||||
|
<ul>
|
||||||
|
<li> See also for the current working documentation
|
||||||
|
for this subject:
|
||||||
|
<a href="http://svn.cacert.org/CAcert/policy.htm#p3.1">
|
||||||
|
CPS (wip) 3.1 Naming </a>. </li>
|
||||||
|
<li> RFC 3039 Qualified Certificate Profile. </li>
|
||||||
|
</ul>
|
||||||
<h2>
|
<h2>
|
||||||
1. Information Policies
|
1. Information Policies
|
||||||
</h2>
|
</h2>
|
||||||
|
@ -251,5 +258,119 @@ guaranteed). CSR can have user provided "Subject" X.501 information.
|
||||||
<p>
|
<p>
|
||||||
<a href="http://validator.w3.org/check?uri=referer"><img src="../Images/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /></a>
|
<a href="http://validator.w3.org/check?uri=referer"><img src="../Images/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<h2>
|
||||||
|
A1. Notes on Transliterations in Names
|
||||||
|
</h2>
|
||||||
|
<p align="center"> <font color="green"><i>
|
||||||
|
Following notes were in the Assurance Policy but now moved to here
|
||||||
|
for consideration.
|
||||||
|
</font></i></p>
|
||||||
|
|
||||||
|
<p>The Common Name and related certificate fields in the
|
||||||
|
issued certificate is dependent on the assurance of the Name in the
|
||||||
|
web account. Abbreviation and transliteration handling in the CN is
|
||||||
|
defined in the Certificate Implementation Policy and is similar to
|
||||||
|
the name comparison as defined in this policy. However the Common
|
||||||
|
Name may become less discriminative as than
|
||||||
|
the assured Name as the unique certificate serial number will lead to
|
||||||
|
the account of the individual in a unique way, and in this way to the
|
||||||
|
Name and email address of the individual or organisation. The first
|
||||||
|
given name in the Common Name may be abbreviated on request.</p>
|
||||||
|
<p>The certificate issued by CAcert can have on request of
|
||||||
|
the Member the SubjAltName field. The name as defined by the Member
|
||||||
|
is not checked by CAcert.</p>
|
||||||
|
<table border="1" cellpadding="2" cellspacing="0">
|
||||||
|
<tbody>
|
||||||
|
<tr>
|
||||||
|
<th width="25%">
|
||||||
|
<p><i>name on the ID</i></p>
|
||||||
|
</th>
|
||||||
|
<th width="25%">
|
||||||
|
<p><i>assured Name in the account</i></p>
|
||||||
|
</th>
|
||||||
|
<th width="25%">
|
||||||
|
<p><i>name in the certificate request</i></p>
|
||||||
|
</th>
|
||||||
|
<th width="25%">
|
||||||
|
<p><i>name on the issued certificate</i></p>
|
||||||
|
</th>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td>
|
||||||
|
<p>Maria Kate Märvel-Java </p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>Maria K. Maervel-Java</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>M. K. Märvel-Java</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>Maria K. Maervel-Java</p>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td>
|
||||||
|
<p>prof. dr. John K. Marvel</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>John K. Marvel</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>John K. Marvel</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>John K. Marvel</p>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td>
|
||||||
|
<p>Moeria Koete v. Java</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>Möria Kœté von Java</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>Möria K. v. Java</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>Möria K. v. Java</p>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td>
|
||||||
|
<p>Jamé de Häring sr</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>Jame de Haering</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>J. d. Häring</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>J. d. Haering</p>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td>
|
||||||
|
<p>Jame d. Haering sr</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>dr Jamé de Häring</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>John de Haering</p>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<p>dr Jamé de Häring</p>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
|
<p align="center"><font size="2"><b>table XXXX:</b>
|
||||||
|
Examples of names in
|
||||||
|
different contexts</font></p>
|
||||||
|
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
|
Loading…
Reference in a new issue