Confirmed users, Administrators
5,526
edits
CA/BR Audit Guidance: Difference between revisions
Jump to navigation
Jump to search
m
→BR Audits
m (→BR Audits) |
|||
| Line 15: | Line 15: | ||
Here are some examples of the level of information that should be included in the BR audit statement in regards to BRs that the CA is not yet fully conforming to. | Here are some examples of the level of information that should be included in the BR audit statement in regards to BRs that the CA is not yet fully conforming to. | ||
* BR 9.5 (section 6.1. | * BR 9.5 (section 6.1.5 in BR version 1.3) – 1024-bit certs with validity beyond 2013 (in order to support legacy customer apps) | ||
* BR 13.2.6 (section 4.9.10 in BR version 1.3) - OCSP giving status “good” for unknown serial numbers. | * BR 13.2.6 (section 4.9.10 in BR version 1.3) - OCSP giving status “good” for unknown serial numbers. | ||
* BR 16.5 (section 5 in BR version 1.3) - multi-factor authentication for '''all''' accounts capable of directly causing certificate issuance | * BR 16.5 (section 5 in BR version 1.3) - multi-factor authentication for '''all''' accounts capable of directly causing certificate issuance | ||