diff --git a/draft-ietf-uta-tls13-iot-profile.md b/draft-ietf-uta-tls13-iot-profile.md index 42044dd..9255c3a 100644 --- a/draft-ietf-uta-tls13-iot-profile.md +++ b/draft-ietf-uta-tls13-iot-profile.md @@ -481,17 +481,9 @@ MUST NOT be marked critical. This section outlines the requirements for root CA certificates. -## subjectName +## Subject -{{!RFC5280}} defines the subjectName field as follows: "The subject field identifies -the entity associated with the public key stored in the subject public key -field." RFC 5280 adds "If the subject is a CA then the subject field MUST be -populated with a non-empty distinguished name matching the contents of the -issuer field in all certificates issued by the subject CA." - -Root CA certificates MUST have a non-empty subjectName. - -The subjectName MUST contain the commonName, the organizationName, and the countryName attribute and MAY contain an organizationalUnitName attribute. +{{!RFC5280}} mandates that Root CA certificates MUST have a non-empty subject field. The subject field MUST contain the commonName, the organizationName, and the countryName attribute and MAY contain an organizationalUnitName attribute. ### Authority Key Identifier