432044 - Certificates with signed Organization attribute reported to user as "(unknown)" and "This web site does not provide identity information"

Status: RESOLVED DUPLICATE of bug 429021

(Firefox :: Security, defect)

Description

[Chris Linstruth]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9b5) Gecko/2008032619 Firefox/3.0b5
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9b5) Gecko/2008032619 Firefox/3.0b5

Sites secured with a certificate signed by a trusted authority and containing an Organization (O) attribute are incorrectly flagged as "this site is run by (unknown)" and "This web site does not provide identity information"

Reproducible: Always

Steps to Reproduce:
1. navigate to a secure site 
2. Click on the nav bar
3. Or view certificate information
Actual Results:  
nav bar security information reports site "is run by (unknown)"
Certificate information shows "This web site does not provide identity information"

Expected Results:  
If a trusted certficate authority has signed the Organization (O) attribute, the contents of that attribute should be reported.  In this example, the reported organization should be "Mozilla Corporation."

This appears to work correctly only if a certificate is flagged as Extended Validation.

Comment 1

[Jo Hermans]

This i done on purpose in bug 418694 (see bug 418694 comment 4) - there's no way to check if the information is correct. Unless it's an EV certificate.