> On Apr 24, 2017, at 7:41 AM, Gervase Markham via Public <[email protected]> > wrote: > > On 20/04/17 18:57, Ryan Sleevi wrote: > >> That is, if 3.2.2.4 were worded to somehow suggest that: >> "The CA SHALL confirm that, as of the date the Certificate issues, the >> CA has validated each FullyâQualified Domain Name (FQDN) listed in the >> Certificate using at least one of the methods listed below, or is within >> the Domain Namespace of a Fully-Qualified Domain Name (FQDN) that has >> been validated using at least one of the methods listed below. " > > Are we happy that, for all 10 methods, proof of control of > foo.example.com makes it fine to issue wibble.fish.foo.example.com?
No. One of the 10 does not allow that. _______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
