@@ -2497,14 +2497,14 @@ As stated in clause 5.10, since minimizing the impact on other systems relies on
- OBJECTIVE: Verify the format of public-key certificates issued by the certificate generation service complies with ITU-T X.509 [\[2\]](#_ref_2).
- PREPARATION: Document the circumstances in which the certificate generation service may issue a certificate. Ability to request a certificate issuance for the different identified circumstances.
- ACTIVITIES: For each way the product may issue a certificate:
a) issue a certificate;
b) verify points a,c,f of the NOTE of REQ-5.3-02;
c) attempt to issue a certificate with a null Name for the issuer field, then verify the certificate contains a critical issuerAltName extension;
d) attempt to issue a certificate with a null Name for the subject field, then verify the certificate contains a critical subjectAltName extension;
- issue a certificate;
- verify points a,c,f of the NOTE of REQ-5.3-02;
- attempt to issue a certificate with a null Name for the issuer field, then verify the certificate contains a critical issuerAltName extension;
- attempt to issue a certificate with a null Name for the subject field, then verify the certificate contains a critical subjectAltName extension;
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE:
a) The documentation of certificate issuance circumstances;
b) the way issuances were requested, and the responses and issued certificates from the product.
- The documentation of certificate issuance circumstances;
- the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC-PKI-EMM-03
- OBJECTIVE: Verify the product implements and follows a certificate profile for issued certificates.
