CA/Subordinate CA Checklist: Difference between revisions

Jump to navigation Jump to search
Line 4: Line 4:


# General description of the sub-CAs operated by third parties.
# General description of the sub-CAs operated by third parties.
# The Certificate Practice Statement and Policy that the sub-CAs are required to follow.
# The CP/CPS that the sub-CAs are required to follow.
# Requirements (technical and contractual) for sub-CAs in regards to whether or not sub-CAs are constrained to issue certificates only within certain domains, and whether or not sub-CAs can create their own subordinates.
# Requirements (technical and contractual) for sub-CAs in regards to whether or not sub-CAs are constrained to issue certificates only within certain domains, and whether or not sub-CAs can create their own subordinates.
# Requirements for sub-CAs to take reasonable measures to verify the ownership of the domain name and email address for end-entity certificates chaining up to the root, as per section 7 of our [http://www.mozilla.org/projects/security/certs/policy/ Mozilla CA certificate policy].
# Requirements for sub-CAs to take reasonable measures to verify the ownership of the domain name and email address for end-entity certificates chaining up to the root, as per section 7 of our [http://www.mozilla.org/projects/security/certs/policy/ Mozilla CA certificate policy].
Confirmed users, Administrators
5,526

edits

Navigation menu