Skip to content

PIV does not render subject OID 1.2.840.113549.1.9.1 key name #2137

@ppslim

Description

@ppslim

OS: Windows 11
Authenticator: 7.3.2
Yubikey 5 NFS f/w 5.4.3

I have cert in slot 9a that contains OID 1.2.840.113549.1.9.1 (pkcs-9-at-emailAddress) in the certificate subject.

The result of which is a value that renders like follows for the subject

CN=First Surname,1.2.840.113549.1.9.1=email@test.org,O=Name,L=Locale,C=XX

Or as followed when the subject is hovered over.

CN=First Surname,1.2.840.113549.1.9.1=email@test.org
O=Name
L=Locale
C=XX

Whilst the OID is deprecated, it is not out for removal. It would be useful for Authenticator could render the attribute name correctly, as either E or emailAddress

Alternatives are to use a SAN entry of type UPN for RFC 822 Name, but legacy applications cannot always used these.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions