What standards do certification authorities have to comply with?

Generally, in order to be accepted by a browser supplier, a certification authority must meet standards set either by the AICPA/CICA or by ETSI. The AICPA/CICA standard if called 'WebTrust for CAs' and the ETSI standard is called 'ETSI TS 101456 Policy requirements for certification authorities issuing qualified certificates'.

These audit schemes impose requirements on the certification authority's systems, personnel and procedures. But, they don't prescribe the methods used by the certification authority to validate the identifying information that is to be included in the certificate.

With the introduction of Extended Validation Certificates, WebTrust will be augmented to audit the certification authority's conformance with the extended validation guidelines.
  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

Why do you ask for documentation when I apply for a certificate?

We recognize that strong validation is essential for the continuing growth of ecommerce. Before...

Why do you validate my SSL application?

To ensure that our products are both secure and trusted we carry out a two step validation...

What documentation do I need to send to you?

We accept many forms of documentation, from many countries. Acceptable corporate documentation...

How do I send you my documentation?

We are happy to accept documentation via email, fax or post:Email: docs@comodo.com (Accepted...

I have ordered a certificate from you before. Do I need to send my documentation again?

If you order subsequent certificates, through your existing account, we don't need you to...