1308755 - Change UI for Subject DN of an EV SSL Ceritificate

Status: RESOLVED DUPLICATE of bug 500333

(Core :: Security: PSM, enhancement)

Description

[Li-Chun CHEN]

Attachment: Mozilla-DN.png(The detaile information of Subject DN view in Firefox

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E; rv:11.0) like Gecko

Steps to reproduce:

If we viw an EV SSL Certificate Detailed Information of Subject DN view in Firefox, for example we connect to https://github.com/,


Actual results:

Relying party will see some OIDs in Detailed Information of Subject DN of this EV SSL certificate as below,

CN = github.com
O = "GitHub, Inc."
L = San Francisco
ST = California
C = US
Object Identifier (2 5 4 17) = 94107
Object Identifier (2 5 4 9) = "88 Colin P Kelly, Jr Street"
Object Identifier (2 5 4 5) = 5157550
Object Identifier (1 3 6 1 4 1 311 60 2 1 2) = Delaware
Object Identifier (1 3 6 1 4 1 311 60 2 1 3) = US
Object Identifier (2 5 4 15) = Private Organization


Expected results:

Could the UI become :
CN = github.com
O = GitHub, Inc.
L = San Francisco
S = California
C = US
PostalCode = 94107
STREET = 88 Colin P Kelly, Jr Street
SERIAL NUMBER = 5157550
Jurisdiction of Incorporation State or Province = Delaware
Jurisdiction of Incorporation Country = US
Business Category = Private

That is, please parsing the EV SSL Certificate mapping 
Object Identifier (2 5 4 17) as PostalCode
Object Identifier (2 5 4 9)  as STREET
Object Identifier (2 5 4 5) as Serial Number
Object Identifier (1 3 6 1 4 1 311 60 2 1 1) as Jurisdiction of Incorporation Locality
Object Identifier (1 3 6 1 4 1 311 60 2 1 2) as Jurisdiction of Incorporation State or Province 
Object Identifier (1 3 6 1 4 1 311 60 2 1 3) as Jurisdiction of Incorporation Country 
Object Identifier (2 5 4 15) as Business Category.
It will greatly improve user experience to use Firefox to browse a important site installed by an EV SSL certificate. 
Note that 1.3.6.1.4.1.311.60.2.1.1,1.3.6.1.4.1.311.60.2.1.2,1.3.6.1.4.1.311.60.2.1.3 are three propritery OIDs registered by Micrsoft, we will suggest CA/Browser Forum to consider to change the 3 OIDs to under CA/Browser Forum's OID arc.

Comment 1

[:Cykesiopka]

Hi,

Thanks for filing the bug. It looks like this is already filed as Bug 500333, so I'm marking this bug as a duplicate.