Use of organizationIdentifier in subjectDN of EV Certificates

1. Presented by: For:
© ETSI 2018
7 June 2018
Use of organizationIdentifier in subjectDN
of EV Certificates
Nick Pope
Vice chair ETSI ESI
CAB Forum London Meeting
7 June 2018

2. © ETSI 2018 2
Agenda
 The prime requirement: 2nd Payment Services Directive
(PSD2)
 ETSI standards for PSD2
 Question relating to Publicly Trusted Certificates
 Proposal for extension to EV Guidelines

3. © ETSI 2018 3
The prime requirement – PSD2
 EU payment services Directive (EU) 2015/2366: Requires EU banks to provide “open”
interface for third party payment services (TPP) to provide added value services :
 Account servicing
 Payment initiation
 Account information services
 Issuing of card based [or equivalent] payment instruments
 Delegated regulation (EU) 2018/389 Article 24: requires communications between
TPP and banks to be protected using Qualified Website / Electronic Seal Certificates.
This is to include the Payment Service Provider Authorisation Number issued by
National (financial services) Competent Authority
 Test interface to be available from Banks by 14 March 2019,
operational 14 September 2019

4. © ETSI 2018 4
ETSI TS 119 495: PSD2 Qualified Certificates
PSD2 Authorisation Number

5. © ETSI 2018 5
ETSI EN/TS 119 412-1 Certificate profiles
Part 1 Overview and Common Data Structures

6. © ETSI 2018 6
ETSI EN/TS 119 412-1 Certificate profiles
Part 1 Overview and Common Data Structures (cont’d )

7. © ETSI 2018 7
ETSI EN/TS 119 412-1 Certificate profiles
Part 1 Overview and Common Data Structures (semantics id )
Carried in QC Statement Extension
See EN 319 412-5

8. © ETSI 2018 8
Why the Question about it being applicable to EV ?
(see liaison from ETSI)
 Currently, aimed at TPP <-> Bank secure communications
 Expect EU banks / TPPs would like to prove the same authorization
identifier to their customers

9. © ETSI 2018 9
Proposed Extension to EV Guidelines
Proposed additional text for CA/Browser Forum EV Guidelines section 9.2.x:
Certificate field: organizationIdentifier (OID 2.5.4.97)
Required/Optional: Optional
Contents: This contains subject additional registration information as required for specific
regulatory purposes other than the registration as described in 9.2.6. This field shall be
encoded as specified in ETSI TS 119 412-1 v1.2.1 clause 5.1.4. This shall not contain
registration number from a national trade register as identified by “NTR” in ETSI TS 119
412-1 v1.2.1 clause 5.1.4.
 Migration to alternative for semantics identifier in QC Statement ????

10. © ETSI 2018 10
Conclusion
 Information on available standards and current activities:
https://portal.etsi.org/TBSiteMap/ESI/ESIActivities.aspx
 ETSI standards: available for free download
http://www.etsi.org/standards-search
CAB Forum assistance welcomed