######## E-Governance CA Certificate Policy Change Proposal 

**Change Number:** ***2005-03***

**To:** Federal PKI Policy Authority

**From:** E-Authentication PMO

**Through:** Certificate Policy Working Group

**Subject:** Proposed modifications to the E-Governance CA CP

**Date:** 22 September 2005

**\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\--**

**Title:** Modify the E-Governance CA CP to permit additional attributes
to appear in subscriber distinguished names.

## Version and Date of Certificate Policy Requested to be changed:  {#version-and-date-of-certificate-policy-requested-to-be-changed .sub-heading}

X.509 Certificate Policy For The E-Governance Certification Authorities
Version 1.1 dated 13 September 2005.

**Change Advocate Contact Information:**

Name: **Cheryl Jenkins**

Organization: **GSA**

Telephone number: 571 259 9923

E-mail address: <cheryl.jenkins@gsa.gov>

**Organization requesting change**: E-Authentication Program Management
Office

## \-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-- {#section .sub-heading}

**Change summary**:

The construction of the subscriber distinguished names is strictly
described. This proposal allows the distinguished name for subscribers
to include additional attributes.

**Background**: The E-Authentication PMO requests this change proposal
to accommodate commercial products which may include attributes in the
subscriber distinguished names in addition to those currently specified.

**Specific Change:**

Make the following changes in Section 3.1.1. Inserted text is shown in
*italics*; deleted text is shown with ~~strikethrough~~.

**3.1.1 Types of Names**

Names assigned to E-Governance CAs shall be in the following form:

-   C=US, o=U.S. Government, ou=GSA, ou=e-Gov, cn=CAname

The common name should be descriptive and must include the
authentication level supported by the CA.

CSP subscriber names assigned by E-Governance CAs shall be in the
following form:

-   C=US, o=Organization, \[ou=major unit\], \[ou=minor unit\], cn=CSP
    name

The ou attributes are optional. The common name may be descriptive, or
may be the Internet domain name of the CSP. That is, the common name may
be "Acme Corporation" or "csp1.acme.com". *The naming attributes
identified in \[RFC 3280\] may also be included in CSP subscriber
distinguished names.*

CSP subscriber certificates shall also include the CSP's Internet domain
name in the subject alternative name extension and an email address for
a human point of contact.

Agency application server subscriber names assigned by the e-Governance
CAs shall be in the following form:

-   C=US, o=U.S. Government, \[ou=department\], \[ou=agency\], cn=Agency
    Server name

The organizational units department and agency appear when applicable
and are used to specify the federal entity that employs the subscriber.
At least one organizational unit must appear in the DN. The common name
may be descriptive, or may be the Internet domain name of the server
supporting the application. That is, the common name may be "Big Agency
Grants Server" or "grants1.bigagency.gov". *The naming attributes
identified in \[RFC 3280\] may also be included in agency application
server subscriber distinguished names.*

Agency application server certificates shall also include the server's
Internet domain name in the subject alternative name extension and may
include an email address for a human point of contact.

**Estimated Cost:**

There is no financial cost associated with implementing this change.

**Implementation Date:**

This change will be implemented immediately.

**Prerequisites for Adoption:**

There are no prerequisites.

**Plan to Meet Prerequisites:**

There are no prerequisites.

**Approval and Coordination Dates:**

Date presented to CPWG: **13 October** **2005**

Date CPWG recommended approval: **13 October** **2005**

Date Presented to FPKI PA: **09 November 2005**

Date of approval by FPKI PA: **09 November 2005**