Skip to content

Commit

Permalink
simplify requirements to just root CA
Browse files Browse the repository at this point in the history
  • Loading branch information
@mcr
mcr authored Sep 2, 2024
1 parent 2bc415f commit 7461b8d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion draft-ietf-uta-tls13-iot-profile.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -489,7 +489,7 @@ field." RFC 5280 adds "If the subject is a CA then the subject field MUST be
populated with a non-empty distinguished name matching the contents of the
issuer field in all certificates issued by the subject CA."

Root CA certificates and Subordinate CA certificates MUST have a non-empty SubjectDN, as the value MUST match the DN of the Issuer.
Root CA certificates MUST have a non-empty SubjectDN.

The Subject field MUST be set and MUST contain the commonName, the organizationName,
and the countryName attribute and MAY contain an organizationalUnitName attribute.
Expand Down

0 comments on commit 7461b8d

Please sign in to comment.