Corey Bonnell
Corey Bonnell
While there are several lints that checks for the syntactic correctness of domain labels, there appears to be no comprehensive check to ensure that all labels of a FQDN are...
SC47 (https://github.com/cabforum/servercert/pull/290/files#diff-e0ac1bd190515a4f2ec09139d395ef6a8c7e9e5b612957c1f5a2dea80c6a6cfeR2111) specifies that effective immediately upon completion of the IPR period, the OU attribute is prohibited if the `organizationName` attribute is absent. This bans OU for DV as well...
The value type of the CRLNumber CRL extension in RFC 5280 is defined as CRLNumber, not INTEGER (CRLNumber has a constraint to prohibit negative values).