From 8c8f2fceb9cb14e9ed4e08eebe5d3a66f8541fb4 Mon Sep 17 00:00:00 2001 From: Josh Aas Date: Thu, 3 Sep 2026 16:32:13 -0400 Subject: [PATCH 1/3] Fix two incorrect CN charater limit values. --- content/en/docs/glossary.md | 2 +- content/en/docs/profiles.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/content/en/docs/glossary.md b/content/en/docs/glossary.md index 12c6dcd81..a289f49c7 100644 --- a/content/en/docs/glossary.md +++ b/content/en/docs/glossary.md @@ -71,7 +71,7 @@ Note for translators: {{% def id="CT-log" name="Certificate Transparency Log" %}} A component of [Certificate Transparency](#def-CT) that accepts submissions of certificates and [precertificates](#def-precertificate) and incorporates them into a permanent, verifiable, publicly-accessible list. {{% /def %}} -{{% def id="CN" name="Common Name" abbr="CN" %}} Part of a certificate's [Subject](#def-subject) describing what the certificate is about. For [roots](#def-root) and [intermediates](#def-intermediate) it's the human-readable name of the [certificate authority](#def-CA). For [leaf certificates](#def-leaf) it's one of the domain names on the certificate. Note: The common name is limited to 63 characters. It is an obsolete method of indicating a domain name to which the certificate applies, since current Internet standards expect software to check only the [Subject Alternative Names](#def-SAN) in order to determine the applicability of a certificate. {{% /def %}} +{{% def id="CN" name="Common Name" abbr="CN" %}} Part of a certificate's [Subject](#def-subject) describing what the certificate is about. For [roots](#def-root) and [intermediates](#def-intermediate) it's the human-readable name of the [certificate authority](#def-CA). For [leaf certificates](#def-leaf) it's one of the domain names on the certificate. Note: The common name is limited to 64 characters. It is an obsolete method of indicating a domain name to which the certificate applies, since current Internet standards expect software to check only the [Subject Alternative Names](#def-SAN) in order to determine the applicability of a certificate. {{% /def %}} {{% def id="cross-signing" name="Cross Signing" %}} An issuing certificate may be signed by more than one [root](#def-root), possibly from different CAs. When one CA signs another CA's certificate, it's called cross-signing. {{% /def %}} diff --git a/content/en/docs/profiles.md b/content/en/docs/profiles.md index bc796a977..cbe91f3f7 100644 --- a/content/en/docs/profiles.md +++ b/content/en/docs/profiles.md @@ -32,7 +32,7 @@ The classic profile is the default profile selected for all orders which do not | [Max Names](#max-names) | 100 | | [Identifier Types](#identifier-types) | DNS | -\*: If the CSR submitted at finalize time requests a specific Common Name that corresponds to a dNSName Subject Alternative Name, that request is honored. If the CSR does not request a specific Common Name, the first dNSName Subject Alternative Name requested will be promoted into the Subject Common Name. If either the requested name or the to-be-promoted name is too long to fit in the Common Name field (64+ characters), the Common Name will be left empty. +\*: If the CSR submitted at finalize time requests a specific Common Name that corresponds to a dNSName Subject Alternative Name, that request is honored. If the CSR does not request a specific Common Name, the first dNSName Subject Alternative Name requested will be promoted into the Subject Common Name. If either the requested name or the to-be-promoted name is too long to fit in the Common Name field (65+ characters), the Common Name will be left empty. †: Only included for certificates with RSA public keys. From 724c482c08f22b693b559e35f4c895c946d908bc Mon Sep 17 00:00:00 2001 From: Josh Aas Date: Thu, 3 Sep 2026 16:38:06 -0400 Subject: [PATCH 2/3] Clean up CN length language in profiles doc more generally --- content/en/docs/profiles.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/profiles.md b/content/en/docs/profiles.md index cbe91f3f7..421979463 100644 --- a/content/en/docs/profiles.md +++ b/content/en/docs/profiles.md @@ -32,7 +32,7 @@ The classic profile is the default profile selected for all orders which do not | [Max Names](#max-names) | 100 | | [Identifier Types](#identifier-types) | DNS | -\*: If the CSR submitted at finalize time requests a specific Common Name that corresponds to a dNSName Subject Alternative Name, that request is honored. If the CSR does not request a specific Common Name, the first dNSName Subject Alternative Name requested will be promoted into the Subject Common Name. If either the requested name or the to-be-promoted name is too long to fit in the Common Name field (65+ characters), the Common Name will be left empty. +\*: If the CSR submitted at finalize time requests a specific Common Name that corresponds to a dNSName Subject Alternative Name, that request is honored. If the CSR does not request a specific Common Name, the first dNSName Subject Alternative Name requested will be promoted into the Subject Common Name. The length limit on the Common Name field is 64 characters. If the Common Name would be 65 or more characters, it will be left empty. †: Only included for certificates with RSA public keys. From 6aba22ab0b7589c4a65c6537f61aa5c723bab8f0 Mon Sep 17 00:00:00 2001 From: Aaron Gable Date: Tue, 8 Sep 2026 15:51:32 -0700 Subject: [PATCH 3/3] Update lastmods Co-authored-by: Aaron Gable --- content/en/docs/glossary.md | 2 +- content/en/docs/profiles.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/content/en/docs/glossary.md b/content/en/docs/glossary.md index a289f49c7..0ac9fc423 100644 --- a/content/en/docs/glossary.md +++ b/content/en/docs/glossary.md @@ -1,7 +1,7 @@ --- title: Glossary slug: glossary -lastmod: 2026-07-04 +lastmod: 2026-09-08 show_lastmod: 1 description: "A glossary of terms related to SSL/TLS certificates, HTTPS, and web security used by Let's Encrypt." --- diff --git a/content/en/docs/profiles.md b/content/en/docs/profiles.md index 421979463..4746b6c12 100644 --- a/content/en/docs/profiles.md +++ b/content/en/docs/profiles.md @@ -1,7 +1,7 @@ --- title: Profiles slug: profiles -lastmod: 2026-07-14 +lastmod: 2026-09-08 show_lastmod: false ---