Skip to content

Commit

Permalink
SC-72 - Delete except to policyQualifiers in EVGs; align with BRs by …
Browse files Browse the repository at this point in the history
…making them NOT RECOMMENDED (#490)

* Align policyQualifiers with BRs and make them NOT RECOMMENDED

* Remove all references around policyQualifiers 

The EVG already includes all provisions of the TLS BRs, no need to re-specify this here.
  • Loading branch information
vanbroup authored Apr 3, 2024
1 parent 8e7fc7d commit 45906c5
Showing 1 changed file with 2 additions and 20 deletions.
22 changes: 2 additions & 20 deletions docs/EVG.md
Original file line number Diff line number Diff line change
Expand Up @@ -608,31 +608,13 @@ All provisions of the Baseline Requirements concerning Minimum Cryptographic Alg

Otherwise, it MAY contain the anyPolicy identifier.

2. The following fields MUST be present if the Subordinate CA is not controlled by the entity that controls the Root CA.

* `certificatePolicies:policyQualifiers:policyQualifierId`

`id-qt 1` [RFC 5280]

* `certificatePolicies:policyQualifiers:qualifier:cPSuri`

HTTP URL for the Root CA's Certification Practice Statement

3. The `certificatePolicies` extension in EV Certificates issued to Subscribers MUST include the following:
2. The `certificatePolicies` extension in EV Certificates issued to Subscribers MUST include the following:

* `certificatePolicies:policyIdentifier` (Required)

The Issuer's EV policy identifier

* `certificatePolicies:policyQualifiers:policyQualifierId` (Required)

`id-qt 1` [RFC 5280]

* `certificatePolicies:policyQualifiers:qualifier:cPSuri` (Required)

HTTP URL for the Subordinate CA's Certification Practice Statement

4. The `cRLDistributionPoints` extension MUST be present in Subscriber Certificates if the certificate does not specify OCSP responder locations in an `authorityInformationAccess` extension.
3. The `cRLDistributionPoints` extension MUST be present in Subscriber Certificates if the certificate does not specify OCSP responder locations in an `authorityInformationAccess` extension.

## 9.8. Certificate Extensions

Expand Down

0 comments on commit 45906c5

Please sign in to comment.