SendRegning/sr-peppol — Issue #15: Verify that we compare the CNAME of the certificates
Author: steinarcook
Created: 2011-12-07 08:24:48+00:00
State: open

This comment was posted on LinkedIn:

Thanks for your comment. You definetely made a good point, **the serial number should not be validated but the subject common name instead**. This is something we implemented for testing purposes. You will find the correct way to do it under 4.9.5 Validation point in the START Specs. We will provide a new release fixing this validation.