Only apply CN check to Subscriber certificates

zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.

https://zmap.io

Apache License 2.0

347 stars 106 forks source link

Only apply CN check to Subscriber certificates #851

Closed XolphinMartijn closed 3 weeks ago

XolphinMartijn commented 1 month ago

During a test run, lint_commonname_mailbox_validated spat out an error on a Subordinate CA. It seems the lint is currently being run on all certificates having the S/MIME Legacy OID, however, the requirement on the commonName only apply to Subscriber certificates.