Re: [Openca-Users] Description Object

[CALinux <ca...@li...>]

> Is this the DN (the subject) of the certificate? Is this only the prefix
> of the DN or is this the whole DN?

Italian law requires  two mandatory objects in certificate's subject:

    common name (object ID=2.5.4.3)
    description (object ID=2.5.4.13)

The stucture of this object must be:
   Common Name=<surname>/<name>/<fiscal code>/<certs identifier by OpenCA>
All fields of common name must be codified with character set of
PrintableString

  Description="C=<surname>/N=<name>/D=<date's birth>[/R=<job role>]
The string, result of binding of the four field, must be codified with
character set of BMPString.

Examples of this object are:

CommonName="Michael/Bell/MCHBLL74B23B954K/0001"
Description="C=Bell/N=Michael/D=01-01-1900/R=Our Save"