Share via

3.2.1.4.2.1.1 Verifying the CA Name

Input Parameter: None.

CANameString: A null terminated [UNICODE] string.

EmptyNameAllowed: BOOLEAN (true or false).

Output Parameter: BOOLEAN (true or false).

Processing Rules:

  1. Return true if the CANameString parameter equals one of the following:

    • The CN attribute of the Subject field in the latest CA signing certificate stored in the Signing_Cert_Certificate column in the Signing_Cert datum.

    • The sanitized value (as specified in section 3.1.1.4.1.1) of the CN attribute of the Subject field in the latest CA signing certificate stored in the Signing_Cert_Certificate column in the Signing_Cert datum.

    • The short sanitized value (as specified in section 3.1.1.4.1.1) of the CN attribute of the Subject field in the latest CA signing certificate stored in the Signing_Cert_Certificate column in the Signing_Cert datum. The algorithm for shortening names is specified in section 3.1.1.4.1.1.1.

  2. Return true if the EmptyNameAllowed is set to true and if the CANameString equals one of the following:

    • NULL

    • L'\0'

  3. Otherwise, return false.