diff --git a/lib/certlint/cablint.rb b/lib/certlint/cablint.rb index c204310..5b125c2 100755 --- a/lib/certlint/cablint.rb +++ b/lib/certlint/cablint.rb @@ -255,8 +255,8 @@ def self.lint(der) unless subjattrs.include? 'serialNumber' messages << 'E: EV certificates must include serialNumber in subject' end - unless subjattrs.include? 'L' - messages << 'E: EV certificates must include localityName in subject' + if !(subjattrs.include? 'L') && !(subjattrs.include? 'ST') + messages << 'E: EV certificates must include either localityName or stateOrProvinceName' end unless subjattrs.include? 'C' messages << 'E: EV certificates must include countryName in subject'