Confirmed users, Administrators
5,526
edits
CA/Forbidden or Problematic Practices: Difference between revisions
Jump to navigation
Jump to search
CA/Forbidden or Problematic Practices (view source)
Revision as of 19:39, 3 March 2010
, 3 March 2010→Other considerations when updating the CA Certificate Policy
| Line 152: | Line 152: | ||
who was (under the above definition) independent and also competent, but may | who was (under the above definition) independent and also competent, but may | ||
nevertheless always provide "the right result" on payment of a fee. | nevertheless always provide "the right result" on payment of a fee. | ||
=== Validate all Data included in Certificates === | |||
Only data that has been verified to be correct should be included in a certificate. All information that is supplied by the requester must be verified to be correct before it may be included in the certificate. Alternative names need to be validated just as well as the subject. For example, if only the email address of the certificate subscriber is verified, then only the email address should be included in the certificate. | |||