Rob Stradling

Discussion of the erratum on the PKIX list: https://mailarchive.ietf.org/arch/msg/pkix/rLa6v4kOlD8BQaJBwnmwX4oxsrE/

@ZsofiaTomicsko No apology needed! Your logic was sound, but the text in the RFC was misleading. Thank you for your contributions!

@FozzieHi For a "warning level lint for a country name appearing in the stateOrProvinceName field", how would you handle name collisions? For example, "Georgia" is both a State in the...

I'm lead developer for Sectigo's ACME service. I agree that the current behaviour (when a client attempts to recover an existing EAB-based account) can only be described as broken, but...

@munnerz There seems to be unanimous agreement that my interpretation was wrong! :-) @jsha's reply (https://mailarchive.ietf.org/arch/msg/acme/rwieiDldue3az6ZKb8plWvO9wFs/) to my list post explained the authors' intended meaning. I'm not totally happy that...

> I've implemented a fix to Sectigo's ACME service that will permit recovery of EAB-based accounts. Due to holiday-related delays and planned deployment schedules, this fix is currently due to...

@dverbeek84 I've found 4 newAccount requests from an IP address in the Netherlands that we logged a few minutes before you posted that comment and which resulted in that error....

> I did not changed the KeyID or KeySecret. Then I presume cert-manager changed it on your behalf. The 4 newAccount requests that I just looked at in our log...

[TLS BR v2 section 7.1.2.7.9](https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-v2.0.1.pdf) forbids the User Notice qualifier in Subscriber Certificates, so if anything this WARN_ should be upgraded to an ERR_ rather than downgraded to an INF_....

That seems like a good start. Thanks @sijms! In my projects I use `go_ora.NewConnection` rather than `sql.Open`, so it looks like I can't use the functions you've added so far...