WT EV Audit Guidelines

SM/TMWEBTRUST FOR CERTIFICATION AUTHORITIES – EXTENDED VALIDATION AUDIT CRITERIA Version 1.1 BASED ON: CA/BROWSER FORUM GUIDELINES FOR THE ISSUANCE AND MANAGEMENT OF EXTENDED VALIDATION CERTIFICATES Version 1.1 Copyright 2008 by Canadian Institute of Chartered Accountants. All rights reserved. The Principles and Criteria may be reproduced and distributed provided that reproduced materials are not in any way directly offered for sale or profit and attribution is given. TABLE OF CONTENTS Page Introduction iii WebTrust Extended Validation – Audit Criteria 1 Appendix A – Illustrative Practitioner’s Reports A1 Appendix B – CA/Browser Forum Guidelines for B1 Extended Valuation Certificates This document has been prepared for the use of licensed WebTrust practitioners, Certification Authorities, Browsers and users of Extended Validation Certificates by the WebTrust Certification Authorities Advisory Group. Members of this Group are: Chair Staff Contact: Donald E. Sheehy Bryan Walker, Deloitte & Touche LLP Canadian Institute of Chartered Accountants Michael Greene Ernst & Young LLP Mark Lundin KPMG LLP Jeffrey Ward Stone Carlie & Company LLC ii INTRODUCTION 1. The growth of internet transactions has emphasized the importance of strong authentication of the identity of web sites, domain owners and online servers. The Certificate Authorities (“CA”) and browser ...