<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><font face="Calibri">All,</font></p>
<p><font face="Calibri">I am not clear why the table of Relevant
dates does not include this one, which seems to be the most
important and demanding one:</font><br>
<blockquote type="cite"><!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:RelyOnVML/>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves/>
<w:TrackFormatting/>
<w:DoNotShowComments/>
<w:HyphenationZone>14</w:HyphenationZone>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>ZH-CN</w:LidThemeAsian>
<w:LidThemeComplexScript>AR-SA</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="false"
DefSemiHidden="false" DefQFormat="false" DefPriority="99"
LatentStyleCount="375">
<w:LsdException Locked="false" Priority="0" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index 9"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" Name="toc 9"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="header"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footer"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="index heading"/>
<w:LsdException Locked="false" Priority="35" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of figures"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="envelope return"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="footnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="line number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="page number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote reference"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="endnote text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="table of authorities"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="macro"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="toa heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Bullet 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Number 5"/>
<w:LsdException Locked="false" Priority="10" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Closing"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Signature"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="true"
UnhideWhenUsed="true" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="List Continue 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Message Header"/>
<w:LsdException Locked="false" Priority="11" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Salutation"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Date"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text First Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Note Heading"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Body Text Indent 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Block Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Hyperlink"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="FollowedHyperlink"/>
<w:LsdException Locked="false" Priority="22" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Document Map"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Plain Text"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="E-mail Signature"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Top of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Bottom of Form"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal (Web)"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Acronym"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Address"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Cite"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Code"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Definition"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Keyboard"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Preformatted"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Sample"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Typewriter"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="HTML Variable"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Normal Table"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="annotation subject"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="No List"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Outline List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Simple 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Classic 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Colorful 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Columns 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Grid 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 4"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 5"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 7"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table List 8"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table 3D effects 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Contemporary"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Elegant"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Professional"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Subtle 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 1"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 2"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Web 3"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Balloon Text"/>
<w:LsdException Locked="false" Priority="39" Name="Table Grid"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Table Theme"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" SemiHidden="true" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" QFormat="true"
Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" QFormat="true"
Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" QFormat="true"
Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" QFormat="true"
Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" QFormat="true"
Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" QFormat="true"
Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" SemiHidden="true"
UnhideWhenUsed="true" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" SemiHidden="true"
UnhideWhenUsed="true" QFormat="true" Name="TOC Heading"/>
<w:LsdException Locked="false" Priority="41" Name="Plain Table 1"/>
<w:LsdException Locked="false" Priority="42" Name="Plain Table 2"/>
<w:LsdException Locked="false" Priority="43" Name="Plain Table 3"/>
<w:LsdException Locked="false" Priority="44" Name="Plain Table 4"/>
<w:LsdException Locked="false" Priority="45" Name="Plain Table 5"/>
<w:LsdException Locked="false" Priority="40" Name="Grid Table Light"/>
<w:LsdException Locked="false" Priority="46" Name="Grid Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="Grid Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="Grid Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="Grid Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="Grid Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="Grid Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="Grid Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="Grid Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="Grid Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="Grid Table 7 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="46" Name="List Table 1 Light"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark"/>
<w:LsdException Locked="false" Priority="51" Name="List Table 6 Colorful"/>
<w:LsdException Locked="false" Priority="52" Name="List Table 7 Colorful"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 1"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 1"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 1"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 1"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 1"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 1"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 2"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 2"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 2"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 2"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 2"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 2"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 3"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 3"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 3"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 3"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 3"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 3"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 4"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 4"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 4"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 4"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 4"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 4"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 5"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 5"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 5"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 5"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 5"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 5"/>
<w:LsdException Locked="false" Priority="46"
Name="List Table 1 Light Accent 6"/>
<w:LsdException Locked="false" Priority="47" Name="List Table 2 Accent 6"/>
<w:LsdException Locked="false" Priority="48" Name="List Table 3 Accent 6"/>
<w:LsdException Locked="false" Priority="49" Name="List Table 4 Accent 6"/>
<w:LsdException Locked="false" Priority="50" Name="List Table 5 Dark Accent 6"/>
<w:LsdException Locked="false" Priority="51"
Name="List Table 6 Colorful Accent 6"/>
<w:LsdException Locked="false" Priority="52"
Name="List Table 7 Colorful Accent 6"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Mention"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Smart Hyperlink"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Hashtag"/>
<w:LsdException Locked="false" SemiHidden="true" UnhideWhenUsed="true"
Name="Unresolved Mention"/>
</w:LatentStyles>
</xml><![endif]--><!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabella normale";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman",serif;
mso-ansi-language:EN-US;
mso-fareast-language:EN-US;}
</style>
<![endif]--><span style="font-size:11.0pt;font-family:
"Cambria",serif;mso-fareast-font-family:"Times
New Roman";mso-bidi-font-family:
"Times New
Roman";mso-ansi-language:EN-US;mso-fareast-language:EN-US;
mso-bidi-language:AR-SA;mso-bidi-font-weight:bold"
lang="EN-US">Effective November, 15, 2022,
for Code Signing Certificates, CAs SHALL ensure that the
Subscriber’s Private Key
is generated, stored, and used in a suitable Hardware Crypto
Module that meets
or exceeds the requirements specified in section 16.3.1</span></blockquote>
</p>
<p>This, in fact, requires that all existing code signing
certificate application web forms that allow a CSR to be pasted be
removed by November 15, if not profoundly modified in order to
comply with §16.3.1, if I am not mistaken.</p>
<p><font face="Calibri">Adriano</font></p>
<p><font face="Calibri"><br>
</font></p>
<div class="moz-cite-prefix">Il 10/03/2022 22:46, Ian McMillan ha
scritto:<br>
</div>
<blockquote type="cite"
cite="mid:CH2PR00MB0696FD460068F7A322852BACC40B9@CH2PR00MB0696.namprd00.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style>@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}@font-face
{font-family:"\@MS PGothic";}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:JA;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:12.0pt;
font-family:"MS Gothic";
mso-fareast-language:JA;}span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-fareast-language:JA;}span.hvr
{mso-style-name:hvr;}span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Thank
you Bruce!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Attached
is the updated redline with the removal of the first
addition of “contractual” which you called out as changing
the current requirement.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Ian
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="mso-fareast-language:EN-US">From:</span></b><span
style="mso-fareast-language:EN-US"> Bruce Morton
<a class="moz-txt-link-rfc2396E" href="mailto:Bruce.Morton@entrust.com"><Bruce.Morton@entrust.com></a>
<br>
<b>Sent:</b> Thursday, March 10, 2022 4:12 PM<br>
<b>To:</b> Ian McMillan <a class="moz-txt-link-rfc2396E" href="mailto:ianmcm@microsoft.com"><ianmcm@microsoft.com></a>;
<a class="moz-txt-link-abbreviated" href="mailto:cscwg-public@cabforum.org">cscwg-public@cabforum.org</a>; Inigo Barreira
<a class="moz-txt-link-rfc2396E" href="mailto:Inigo.Barreira@sectigo.com"><Inigo.Barreira@sectigo.com></a>; Dimitris
Zacharopoulos (HARICA) <a class="moz-txt-link-rfc2396E" href="mailto:dzacharo@harica.gr"><dzacharo@harica.gr></a>;
Adriano Santoni <a class="moz-txt-link-rfc2396E" href="mailto:adriano.santoni@staff.aruba.it"><adriano.santoni@staff.aruba.it></a><br>
<b>Subject:</b> [EXTERNAL] RE: [Cscwg-public] Update to
Subscriber Private Key Protection Requirements (CSC-6 to
CSC-13)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN">Hi
Ian,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN">We
added “contractual” representation in 2 places in section
16.3.1. I believe that the first “contractual” should be
removed as this is changing an existing requirement which
will not be effective as of 15 November 2022. The second
“contractual” should remain as this is a new requirement
which the CAs must meet effective 15 November 2022.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN">With
that change, I am good to endorse the ballot.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN">Thanks,
Bruce. <o:p>
</o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="mso-fareast-language:ZH-CN">From:</span></b><span
style="mso-fareast-language:ZH-CN"> Cscwg-public <<a
href="mailto:cscwg-public-bounces@cabforum.org"
moz-do-not-send="true" class="moz-txt-link-freetext">cscwg-public-bounces@cabforum.org</a>>
<b>On Behalf Of </b>Ian McMillan via Cscwg-public<br>
<b>Sent:</b> Thursday, March 10, 2022 12:43 PM<br>
<b>To:</b> Inigo Barreira <<a
href="mailto:Inigo.Barreira@sectigo.com"
moz-do-not-send="true" class="moz-txt-link-freetext">Inigo.Barreira@sectigo.com</a>>;
<a href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true" class="moz-txt-link-freetext">cscwg-public@cabforum.org</a>;
Dimitris Zacharopoulos (HARICA) <<a
href="mailto:dzacharo@harica.gr"
moz-do-not-send="true" class="moz-txt-link-freetext">dzacharo@harica.gr</a>>;
Adriano Santoni <<a
href="mailto:adriano.santoni@staff.aruba.it"
moz-do-not-send="true" class="moz-txt-link-freetext">adriano.santoni@staff.aruba.it</a>><br>
<b>Subject:</b> [EXTERNAL] Re: [Cscwg-public] Update to
Subscriber Private Key Protection Requirements (CSC-6 to
CSC-13)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:ZH-CN">WARNING:
This email originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you trust the
sender and know the content is safe.<o:p></o:p></span></p>
<div class="MsoNormal" style="text-align:center" align="center"><span
style="mso-fareast-language:ZH-CN">
<hr width="100%" size="1" align="center">
</span></div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Hi
Folks, <o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Coming
out of the meeting today we’ve made some additional changes
to address the term “representation” in section 16 by adding
changing it to “contractual representation”.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Please
review the changes in the attached redline document.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Tim
and Bruce would you review and please reply back with your
confirmed willingness to endorse this ballot as CSC-13?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Ian<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="mso-fareast-language:EN-US">From:</span></b><span
style="mso-fareast-language:EN-US"> Cscwg-public <<a
href="mailto:cscwg-public-bounces@cabforum.org"
moz-do-not-send="true" class="moz-txt-link-freetext">cscwg-public-bounces@cabforum.org</a>>
<b>On Behalf Of </b>Inigo Barreira via Cscwg-public<br>
<b>Sent:</b> Wednesday, March 9, 2022 12:15 PM<br>
<b>To:</b> Dimitris Zacharopoulos (HARICA) <<a
href="mailto:dzacharo@harica.gr"
moz-do-not-send="true" class="moz-txt-link-freetext">dzacharo@harica.gr</a>>;
<a href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true" class="moz-txt-link-freetext">cscwg-public@cabforum.org</a>;
Adriano Santoni <<a
href="mailto:adriano.santoni@staff.aruba.it"
moz-do-not-send="true" class="moz-txt-link-freetext">adriano.santoni@staff.aruba.it</a>><br>
<b>Subject:</b> [EXTERNAL] Re: [Cscwg-public] Update to
Subscriber Private Key Protection Requirements (CSC-6 to
CSC-13)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"
lang="EN-GB">Right, it´s not a new thing but I realized now,
sorry. It´s just the word “representation” that confuses me
and after explanations is more confusing.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"
lang="EN-GB"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="mso-fareast-language:ES" lang="ES">De:</span></b><span
style="mso-fareast-language:ES" lang="ES"> Dimitris
Zacharopoulos (HARICA) <<a
href="mailto:dzacharo@harica.gr"
moz-do-not-send="true" class="moz-txt-link-freetext">dzacharo@harica.gr</a>>
<br>
<b>Enviado el:</b> miércoles, 9 de marzo de 2022 18:00<br>
<b>Para:</b> Inigo Barreira <<a
href="mailto:Inigo.Barreira@sectigo.com"
moz-do-not-send="true" class="moz-txt-link-freetext">Inigo.Barreira@sectigo.com</a>>;
<a href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true" class="moz-txt-link-freetext">cscwg-public@cabforum.org</a>;
Adriano Santoni <<a
href="mailto:adriano.santoni@staff.aruba.it"
moz-do-not-send="true" class="moz-txt-link-freetext">adriano.santoni@staff.aruba.it</a>><br>
<b>Asunto:</b> Re: [Cscwg-public] Update to Subscriber
Private Key Protection Requirements (CSC-6 to CSC-13)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES"><o:p> </o:p></span></p>
<div style="border:solid black 1.0pt;padding:2.0pt 2.0pt 2.0pt
2.0pt">
<p class="MsoNormal"
style="line-height:12.0pt;background:#FAFA03"><span
style="font-size:10.0pt;color:black" lang="ES">CAUTION:
This email originated from outside of the organization. Do
not click links or open attachments unless you recognize
the sender and know the content is safe.</span><span
style="font-size:10.0pt;color:black;mso-fareast-language:ES"
lang="ES"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="ES"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES">It's best if we add the subscriber warranties
and expectations in one place but my point was that we
already expect things from Certificate Subscribers. It's
not a new thing, as you presented it.<br>
<br>
Dimitris.<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="ES">On 9/3/2022 6:03 μ.μ.,
Inigo Barreira wrote:<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US" lang="EN-GB">Nope. In
section 7.2 (which is for certificate warranties)
there´s no clear indication on this unless you consider
1) compliance and 6) key protection enough. Section 7.3
says nothing about this. Further, there´s no definition
of “representation” in section 4 and hence my question
because I was thinking on a different matter.</span><span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US" lang="EN-GB"> </span><span
lang="ES"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="mso-fareast-language:ES" lang="ES">De:</span></b><span
style="mso-fareast-language:ES" lang="ES"> Dimitris
Zacharopoulos (HARICA)
<a href="mailto:dzacharo@harica.gr"
moz-do-not-send="true"><dzacharo@harica.gr></a>
<br>
<b>Enviado el:</b> miércoles, 9 de marzo de 2022
14:08<br>
<b>Para:</b> Inigo Barreira <a
href="mailto:Inigo.Barreira@sectigo.com"
moz-do-not-send="true"><Inigo.Barreira@sectigo.com></a>;
<a href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"
class="moz-txt-link-freetext">cscwg-public@cabforum.org</a>;
Adriano Santoni
<a href="mailto:adriano.santoni@staff.aruba.it"
moz-do-not-send="true"><adriano.santoni@staff.aruba.it></a><br>
<b>Asunto:</b> Re: [Cscwg-public] Update to
Subscriber Private Key Protection Requirements
(CSC-6 to CSC-13)</span><span lang="ES"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES"> <o:p></o:p></span></p>
<div style="border:solid black 1.0pt;padding:2.0pt 2.0pt
2.0pt 2.0pt">
<p class="MsoNormal"
style="line-height:12.0pt;background:#FAFA03"><span
style="font-size:10.0pt;color:black" lang="ES">CAUTION:
This email originated from outside of the
organization. Do not click links or open attachments
unless you recognize the sender and know the content
is safe.</span><span lang="ES"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="ES"> <o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES"> <o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="ES">On 9/3/2022 2:58
μ.μ., Inigo Barreira wrote:<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US" lang="EN-GB">I
agree with Adriano. Point 1 does not make customer
accountable for anything (I will promise I´m a good
guy) and then point 2 is useless because with point
1 you´re allowing the customer to do whatever,
independently if they use a hardw device or not. The
CSRs can be generated in a crypto device or not and
with point 1 you, as the CA, are “sure” that the
keys are in a hardware crypto device. That´s a lot
to assume.</span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US" lang="EN-GB"> </span><span
lang="ES"><o:p></o:p></span></p>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="mso-fareast-language:ES" lang="ES"><br>
You are missing the point of Subscriber
representations and warranties which is clearly
included in the BRs. Subscribers have obligations as
well and we must ensure they are aware and bound to
those obligations.<br>
<br>
Dimitris.</span><span lang="ES"><o:p></o:p></span></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="ES">De:</span></b><span
lang="ES"> Cscwg-public
<a
href="mailto:cscwg-public-bounces@cabforum.org"
moz-do-not-send="true"><cscwg-public-bounces@cabforum.org></a>
<b>En nombre de </b>Dimitris Zacharopoulos
(HARICA) via Cscwg-public<br>
<b>Enviado el:</b> miércoles, 9 de marzo de 2022
13:27<br>
<b>Para:</b> Adriano Santoni <a
href="mailto:adriano.santoni@staff.aruba.it"
moz-do-not-send="true"><adriano.santoni@staff.aruba.it></a>;
<a href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"
class="moz-txt-link-freetext">cscwg-public@cabforum.org</a><br>
<b>Asunto:</b> Re: [Cscwg-public] Update to
Subscriber Private Key Protection Requirements
(CSC-6 to CSC-13)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES"> <o:p></o:p></span></p>
<div style="border:solid black 1.0pt;padding:2.0pt 2.0pt
2.0pt 2.0pt">
<p class="MsoNormal"
style="line-height:12.0pt;background:#FAFA03"><span
style="font-size:10.0pt;color:black" lang="ES">CAUTION:
This email originated from outside of the
organization. Do not click links or open
attachments unless you recognize the sender and
know the content is safe.</span><span lang="ES"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"MS
PGothic",sans-serif" lang="ES"> </span><span
lang="ES"><o:p></o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES">I believe this language and double
confirmation comes from years ago when tools like
remote key attestation were not available.<br>
<br>
If we are to allow an Applicant to generate keys
remotely (i.e. without the presence of a CA
representative and without hardware that supports
remote key attestation), which seems to be the
case with the CSCWG today, we need to rely on
policy to accomplish that. It is reasonable to
hold both sides, the Applicant and the CA,
accountable to this policy. See below.<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="ES">On 9/3/2022
11:43 π.μ., Adriano Santoni via Cscwg-public
wrote:<o:p></o:p></span></p>
</div>
<blockquote
style="margin-top:5.0pt;margin-bottom:5.0pt">
<p><span lang="ES">As far as I'm concerned, I find
confusing and overly complex the double
requirement:<o:p></o:p></span></p>
<p><span lang="ES">1) customer must make a
"representation" that they will use a hardware
crypto module (or signing service), and ...<o:p></o:p></span></p>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES"><br>
This is required because a customer could
potentially "fake" the hardware device id and
create a virtual driver that emulates the actual
hardware device. The Applicant must be held
accountable if they try to manipulate the process
or make any changes to the process and tools
provided by the CA.<br>
<br>
<o:p></o:p></span></p>
<blockquote
style="margin-top:5.0pt;margin-bottom:5.0pt">
<p><span lang="ES">2) the CA must ensure that the
customer will really use a hardware crypto
module (or signing service).
<o:p></o:p></span></p>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES"><br>
The CA must establish a process and develop the
proper tools to provide reasonable assurance that
the Applicant remotely generates keys in a
hardware crypto module which is usually within a
limited set of devices approved by the CA. The CA
is not allowed to say "please send me a CSR and
pinky swear that it was generated in a crypto
device". They must develop tools and middleware
and establish a process to make sure the key is
generated in approved crypto-devices only.<br>
<br>
<o:p></o:p></span></p>
<blockquote
style="margin-top:5.0pt;margin-bottom:5.0pt">
<p><span lang="ES">If the CA will be obliged to meet
req #2, then I do not see what use is req #1.<o:p></o:p></span></p>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES"><br>
Hope this explanation helps.<br>
Dimitris.<br>
<br>
<o:p></o:p></span></p>
<blockquote
style="margin-top:5.0pt;margin-bottom:5.0pt">
<p><span lang="ES">Adriano<o:p></o:p></span></p>
<p><span lang="ES">-- Actalis<o:p></o:p></span></p>
<p><span lang="ES"> <o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span lang="ES">Il 09/03/2022
10:21, Inigo Barreira via Cscwg-public ha
scritto:<o:p></o:p></span></p>
</div>
<blockquote
style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US"
lang="EN-GB">Yes, please.
</span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US"
lang="EN-GB">It looks like this representation
means something like “click here if you are
over 18” or “click here if you agree” because
these are also facts not opinions.
</span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US"
lang="EN-GB">IMO the message here is that CAs
will rely in whatever the subscriber says,
e.g., “yes, I´m a good guy and promise that I
will keep my keys in a hardware device …”
rather on making the corresponding tasks to
ensure. Is this the right approach? This is
what I understand from Dean´s response because
CAs are not attesting anything just relying in
a form signed by the subscriber in where it
may say whatever.</span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US"
lang="EN-GB"> </span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US"
lang="EN-GB">Regards</span><span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-fareast-language:EN-US"
lang="EN-GB"> </span><span lang="ES"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="ES">De:</span></b><span
lang="ES"> Tim Hollebeek
<a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"><tim.hollebeek@digicert.com></a>
<br>
<b>Enviado el:</b> martes, 8 de marzo de
2022 20:35<br>
<b>Para:</b> Dean Coclin <a
href="mailto:dean.coclin@digicert.com"
moz-do-not-send="true"><dean.coclin@digicert.com></a>;
Inigo Barreira
<a
href="mailto:Inigo.Barreira@sectigo.com"
moz-do-not-send="true"><Inigo.Barreira@sectigo.com></a>;
<a href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"
class="moz-txt-link-freetext">
cscwg-public@cabforum.org</a>; Bruce
Morton <a
href="mailto:bruce.morton@entrust.com"
moz-do-not-send="true">
<bruce.morton@entrust.com></a>;
Doug Beattie <a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true">
<doug.beattie@globalsign.com></a>;
Ian McMillan <a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true">
<ianmcm@microsoft.com></a><br>
<b>Asunto:</b> RE: Update to Subscriber
Private Key Protection Requirements (CSC-6
to CSC-13)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES"> <o:p></o:p></span></p>
<p class="MsoNormal">“representation” is being
used here in the legal sense: “<span
style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#404040;background:white">a <span
class="hvr">statement</span> of <span
class="hvr">fact.</span> A <span class="hvr">representation</span> <span
class="hvr">should</span> be <span
class="hvr">distinguished</span> <span
class="hvr">from</span> a <span class="hvr">statement</span> of <span
class="hvr">opinion</span> <span class="hvr">for</span> <span
class="hvr">many</span> <span class="hvr">legal</span> <span
class="hvr">purposes,</span> <span
class="hvr">especially</span> in <span
class="hvr">relation</span> to <span
class="hvr">contractual</span> <span
class="hvr">obligations.</span></span>”<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">We should perhaps be using
plain English instead of legalese.<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">-Tim<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<div style="border:none;border-left:solid blue
1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Dean
Coclin <<span lang="ES"><a
href="mailto:dean.coclin@digicert.com"
moz-do-not-send="true"><span
lang="EN-US">dean.coclin@digicert.com</span></a></span>>
<br>
<b>Sent:</b> Tuesday, March 8, 2022 1:00
PM<br>
<b>To:</b> Inigo Barreira <<span
lang="ES"><a
href="mailto:Inigo.Barreira@sectigo.com"
moz-do-not-send="true"><span
lang="EN-US">Inigo.Barreira@sectigo.com</span></a></span>>;
<span lang="ES"><a
href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"><span
lang="EN-US">cscwg-public@cabforum.org</span></a></span>;
Bruce Morton <<span lang="ES"><a
href="mailto:bruce.morton@entrust.com"
moz-do-not-send="true"><span
lang="EN-US">bruce.morton@entrust.com</span></a></span>>;
Doug Beattie <<span lang="ES"><a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true"><span
lang="EN-US">doug.beattie@globalsign.com</span></a></span>>;
Ian McMillan <<span lang="ES"><a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true"><span
lang="EN-US">ianmcm@microsoft.com</span></a></span>>;
Tim Hollebeek <<span lang="ES"><a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"><span
lang="EN-US">tim.hollebeek@digicert.com</span></a></span>><br>
<b>Subject:</b> RE: Update to Subscriber
Private Key Protection Requirements (CSC-6
to CSC-13)<span lang="ES"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt">This means exactly
what it says, some representation that the
subscriber makes to honor the condition.
This traditionally has been something in
writing that the subscriber signs and
submits to the CA. CAs can provide a form to
the subscriber which they attest to.</span><span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt"> </span><span
lang="ES"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b>
Cscwg-public <<span lang="ES"><a
href="mailto:cscwg-public-bounces@cabforum.org"
moz-do-not-send="true"><span
lang="EN-US">cscwg-public-bounces@cabforum.org</span></a></span>>
<b>On Behalf Of </b>Inigo Barreira via
Cscwg-public<br>
<b>Sent:</b> Tuesday, March 8, 2022 11:03
AM<br>
<b>To:</b> Bruce Morton <<span
lang="ES"><a
href="mailto:bruce.morton@entrust.com"
moz-do-not-send="true"><span
lang="EN-US">bruce.morton@entrust.com</span></a></span>>;
<span lang="ES"><a
href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"><span
lang="EN-US">cscwg-public@cabforum.org</span></a></span>;
Doug Beattie <<span lang="ES"><a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true"><span
lang="EN-US">doug.beattie@globalsign.com</span></a></span>>;
Ian McMillan <<span lang="ES"><a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true"><span
lang="EN-US">ianmcm@microsoft.com</span></a></span>>;
Tim Hollebeek <<span lang="ES"><a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"><span
lang="EN-US">tim.hollebeek@digicert.com</span></a></span>><br>
<b>Subject:</b> Re: [Cscwg-public] Update
to Subscriber Private Key Protection
Requirements (CSC-6 to CSC-13)<span
lang="ES"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES">Hi all,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Reviewing
the section 16.3.1 I have a “wording”
question. What does it mean that “The CA
MUST obtain a representation from the
Subscriber that the Subscriber will use one
of the following options …”. So, what is a
“representation from the subscriber”?</span><span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> </span><span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Regards</span><span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> </span><span
lang="ES"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="ES">De:</span></b><span
lang="ES"> Cscwg-public <<a
href="mailto:cscwg-public-bounces@cabforum.org"
moz-do-not-send="true"
class="moz-txt-link-freetext">cscwg-public-bounces@cabforum.org</a>>
<b>En nombre de </b>Bruce Morton via
Cscwg-public<br>
<b>Enviado el:</b> jueves, 3 de marzo de
2022 15:08<br>
<b>Para:</b> Doug Beattie <<a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true"
class="moz-txt-link-freetext">doug.beattie@globalsign.com</a>>;
Ian McMillan <<a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true"
class="moz-txt-link-freetext">ianmcm@microsoft.com</a>>;
Tim Hollebeek <<a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"
class="moz-txt-link-freetext">tim.hollebeek@digicert.com</a>>;
<a
href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"
class="moz-txt-link-freetext">cscwg-public@cabforum.org</a><br>
<b>Asunto:</b> Re: [Cscwg-public] Update
to Subscriber Private Key Protection
Requirements (CSC-6 to CSC-13)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES"> <o:p></o:p></span></p>
<div style="border:solid black
1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="MsoNormal"
style="line-height:12.0pt;background:#FAFA03"><span
style="font-size:10.0pt;color:black">CAUTION:
This email originated from outside of the
organization. Do not click links or open
attachments unless you recognize the
sender and know the content is safe.</span><span
lang="ES"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<div>
<p class="MsoNormal">Doug,<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Regarding the 16.2
section, this statement was also struck-out,
“After 2021-06-01, the same protection
requirements SHALL apply to Non EV Code
Signing Certificates.” So I believe that the
requirement already applied to normal code
signing certificates. The edits are just a
cleanup.<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Bruce.<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Doug
Beattie <<span lang="ES"><a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true"><span
lang="EN-US">doug.beattie@globalsign.com</span></a></span>>
<br>
<b>Sent:</b> Thursday, March 3, 2022
6:56 AM<br>
<b>To:</b> Ian McMillan <<span
lang="ES"><a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true"><span
lang="EN-US">ianmcm@microsoft.com</span></a></span>>;
Tim Hollebeek <<span lang="ES"><a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"><span
lang="EN-US">tim.hollebeek@digicert.com</span></a></span>>;
<span lang="ES"><a
href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"><span
lang="EN-US">cscwg-public@cabforum.org</span></a></span>;
Bruce Morton <<span lang="ES"><a
href="mailto:Bruce.Morton@entrust.com"
moz-do-not-send="true"><span
lang="EN-US">Bruce.Morton@entrust.com</span></a></span>><br>
<b>Subject:</b> [EXTERNAL] RE: Update to
Subscriber Private Key Protection
Requirements (CSC-6 to CSC-13)<span
lang="ES"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">WARNING: This email
originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you
trust the sender and know the content is
safe.<span lang="ES"><o:p></o:p></span></p>
<div class="MsoNormal"
style="text-align:center" align="center">
<hr width="100%" size="1" align="center">
</div>
<p class="MsoNormal">Hi Ian,<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Good work on section
16.3, that is much more clear now. I have 2
more comments for your consideration.<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Comment #1:<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">In Section 11.7 we say:<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in">If
the CA is aware that the Applicant was the
victim of a Takeover Attack, the CA MUST
verify that the Applicant is protecting its
Code Signing Private Keys under Section
16.3.1(1) or Section 16.3.1(2). The CA MUST
verify the Applicant’s compliance with
Section 16.3.1(1) or Section 16.3.1(2) (i)
through technical means that confirm the
Private Keys are protected using the method
described in 16.3.1(1) or 16.3.1(2) or (ii)
by relying on a report provided by the
Applicant that is signed by an auditor who
is approved by the CA and who has IT and
security training or is a CISA.<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">But now there are
actually 2 lists in sections 16.3.1(1) or
Section 16.3.1(2) with those list numbers.
Do we need to be more specific, or renumber
the second list a-c?
<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">After 15 November, what
is the right remediation for Take Over
attack, do we need to reference one or more
of the items in the new list (the list we
might renumber a-c), or is there no
remediation now?<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">There are multiple
references to 16.3.1(1) so we’d want to
apply the same logic to all instances.<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Comment #2:<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Section 16.2 removed the
reference to EV in the scope so this applies
to normal Code signing certificates. Since
this does not have a date associated with
it, do we assume that this requirement
change for normal code signing certs is
effective immediately?<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Ian
McMillan <<span lang="ES"><a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true"><span
lang="EN-US">ianmcm@microsoft.com</span></a></span>>
<br>
<b>Sent:</b> Wednesday, March 2, 2022
5:56 PM<br>
<b>To:</b> Tim Hollebeek <<span
lang="ES"><a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"><span
lang="EN-US">tim.hollebeek@digicert.com</span></a></span>>;
<span lang="ES"><a
href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"><span
lang="EN-US">cscwg-public@cabforum.org</span></a></span>;
Doug Beattie <<span lang="ES"><a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true"><span
lang="EN-US">doug.beattie@globalsign.com</span></a></span>>;
Bruce Morton <<span lang="ES"><a
href="mailto:bruce.morton@entrust.com"
moz-do-not-send="true"><span
lang="EN-US">bruce.morton@entrust.com</span></a></span>><br>
<b>Subject:</b> RE: Update to Subscriber
Private Key Protection Requirements
(CSC-6 to CSC-13)<span lang="ES"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Thank you, Tim, I really
like the structure suggestions here. I’ve
made those updates per your suggestion in
the attached copy of the redline document.
<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">I’ll note your
endorsement.<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Cheers,<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Ian<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Tim
Hollebeek <<span lang="ES"><a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"><span
lang="EN-US">tim.hollebeek@digicert.com</span></a></span>>
<br>
<b>Sent:</b> Wednesday, March 2, 2022
4:57 PM<br>
<b>To:</b> Ian McMillan <<span
lang="ES"><a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true"><span
lang="EN-US">ianmcm@microsoft.com</span></a></span>>;
<span lang="ES"><a
href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"><span
lang="EN-US">cscwg-public@cabforum.org</span></a></span>;
Doug Beattie <<span lang="ES"><a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true"><span
lang="EN-US">doug.beattie@globalsign.com</span></a></span>>;
Bruce Morton <<span lang="ES"><a
href="mailto:bruce.morton@entrust.com"
moz-do-not-send="true"><span
lang="EN-US">bruce.morton@entrust.com</span></a></span>><br>
<b>Subject:</b> [EXTERNAL] RE: Update to
Subscriber Private Key Protection
Requirements (CSC-6 to CSC-13)<span
lang="ES"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">I would recommend against
using parentheticals to express the
deprecation dates, as it makes the sentences
more complicated than they need to be. I’d
just modify the first sentence of each part
so the structure is as follows:<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> For Non-EV Code
Signing Certificates issued prior to
November 15, 2022, …<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> For EV Code Signing
Certificates issued prior to November 15,
2022, …<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> Effective November 15,
2022, …<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">But otherwise, the
updates look good and we are willing to
endorse CSC-13.<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">-Tim<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<div style="border:none;border-left:solid blue
1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid
#E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Ian
McMillan <<span lang="ES"><a
href="mailto:ianmcm@microsoft.com"
moz-do-not-send="true"><span
lang="EN-US">ianmcm@microsoft.com</span></a></span>>
<br>
<b>Sent:</b> Wednesday, March 2, 2022
11:31 AM<br>
<b>To:</b> <span lang="ES"><a
href="mailto:cscwg-public@cabforum.org"
moz-do-not-send="true"><span
lang="EN-US">cscwg-public@cabforum.org</span></a></span>;
Doug Beattie <<span lang="ES"><a
href="mailto:doug.beattie@globalsign.com"
moz-do-not-send="true"><span
lang="EN-US">doug.beattie@globalsign.com</span></a></span>>;
Bruce Morton <<span lang="ES"><a
href="mailto:bruce.morton@entrust.com"
moz-do-not-send="true"><span
lang="EN-US">bruce.morton@entrust.com</span></a></span>>;
Tim Hollebeek <<span lang="ES"><a
href="mailto:tim.hollebeek@digicert.com"
moz-do-not-send="true"><span
lang="EN-US">tim.hollebeek@digicert.com</span></a></span>><br>
<b>Subject:</b> Update to Subscriber
Private Key Protection Requirements
(CSC-6 to CSC-13)<span lang="ES"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Hi Folks,<span
lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Attached you will find
an updated redline doc of v2.7 of the
CSBRs with the updates to the subscriber
private key protection requirements as
outlined previously in CSC-6. This updated
version also includes edits to address
issues Doug Beattie raised during the
voting period of CSC-6, so I am looking
for confirmation from Doug on these edits
addressing the concerns he raised.
<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Additionally, I’m
looking to get endorsements on this ballot
under
<span lang="ES"><a
href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps*3A*2F*2Fwiki.cabforum.org*2Fcscwg*2Fcsc_13_-_update_to_subscriber_private_key_protection_requirements%26data%3D04*7C01*7Cianmcm*40microsoft.com*7Ce6a5592ea98440d1462508da01f05f7d*7C72f988bf86f141af91ab2d7cd011db47*7C0*7C0*7C637824429178363769*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000%26sdata%3D9so2*2BiOyK9XXEQ8Y*2F*2FnOEd0ZymEoU*2Fub9lk8VS6ucbE*3D%26reserved%3D0__%3BJSUlJSUlJSUlJSUlJSUlJSUlJSUlJQ!!FJ-Y8qCqXTj2!JS-t5TK8xNLRrrr-l8arUfUupgt7PadMcuUOBT4reSeB5x7-jWypHWzhZNsG6GTE_x0%24&data=04%7C01%7Cianmcm%40microsoft.com%7C930e1d88bad74c7a3ec408da02dab235%7C72f988bf86f141af91ab2d7cd011db47%7C0%7C0%7C637825435611904880%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=uCj7cFUrdj%2FvFKrzwe0QUzczK%2FhPyYfwVyDwD2hRFF0%3D&reserved=0"
title="cscwg:csc_13_-_update_to_subscriber_private_key_protection_requirements"
moz-do-not-send="true"><span
lang="EN-US">CSC 13 - Update to
Subscriber Private Key Protection
Requirements</span></a></span>, and
hope that Bruce and Tim, as previous
endorsers can review the edits and endorse
the new ballot. Once we have endorsers
I’ll proceed with the formal ballot
process.
<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal"> <span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Cheers,<span lang="ES"><o:p></o:p></span></p>
<p class="MsoNormal">Ian <span lang="ES"><o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES"><o:p> </o:p></span></p>
<pre><span lang="ES">_______________________________________________<o:p></o:p></span></pre>
<pre><span lang="ES">Cscwg-public mailing list<o:p></o:p></span></pre>
<pre><span lang="ES"><a href="mailto:Cscwg-public@cabforum.org" moz-do-not-send="true" class="moz-txt-link-freetext">Cscwg-public@cabforum.org</a><o:p></o:p></span></pre>
<pre><span lang="ES"><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps*3A*2F*2Flists.cabforum.org*2Fmailman*2Flistinfo*2Fcscwg-public%26data%3D04*7C01*7Cianmcm*40microsoft.com*7Ce6a5592ea98440d1462508da01f05f7d*7C72f988bf86f141af91ab2d7cd011db47*7C0*7C0*7C637824429178363769*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000%26sdata%3DLnP7dwOGGX87Z6tZNa*2BnglvDc7Px*2BrqaClOqrPsfS48*3D%26reserved%3D0__%3BJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!FJ-Y8qCqXTj2!JS-t5TK8xNLRrrr-l8arUfUupgt7PadMcuUOBT4reSeB5x7-jWypHWzhZNsGCdboIbM%24&data=04%7C01%7Cianmcm%40microsoft.com%7C930e1d88bad74c7a3ec408da02dab235%7C72f988bf86f141af91ab2d7cd011db47%7C0%7C0%7C637825435611954879%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=aPPWwtxmIuwxR9iSMbGSVKmtV%2FjraFwjEVoN4LyCqYc%3D&reserved=0" moz-do-not-send="true">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a><o:p></o:p></span></pre>
</blockquote>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
lang="ES"><o:p> </o:p></span></p>
<pre><span lang="ES">_______________________________________________<o:p></o:p></span></pre>
<pre><span lang="ES">Cscwg-public mailing list<o:p></o:p></span></pre>
<pre><span lang="ES"><a href="mailto:Cscwg-public@cabforum.org" moz-do-not-send="true" class="moz-txt-link-freetext">Cscwg-public@cabforum.org</a><o:p></o:p></span></pre>
<pre><span lang="ES"><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps*3A*2F*2Flists.cabforum.org*2Fmailman*2Flistinfo*2Fcscwg-public%26data%3D04*7C01*7Cianmcm*40microsoft.com*7Ce6a5592ea98440d1462508da01f05f7d*7C72f988bf86f141af91ab2d7cd011db47*7C0*7C0*7C637824429178363769*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C3000%26sdata%3DLnP7dwOGGX87Z6tZNa*2BnglvDc7Px*2BrqaClOqrPsfS48*3D%26reserved%3D0__%3BJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!FJ-Y8qCqXTj2!JS-t5TK8xNLRrrr-l8arUfUupgt7PadMcuUOBT4reSeB5x7-jWypHWzhZNsGCdboIbM%24&data=04%7C01%7Cianmcm%40microsoft.com%7C930e1d88bad74c7a3ec408da02dab235%7C72f988bf86f141af91ab2d7cd011db47%7C0%7C0%7C637825435611954879%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=aPPWwtxmIuwxR9iSMbGSVKmtV%2FjraFwjEVoN4LyCqYc%3D&reserved=0" moz-do-not-send="true">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a><o:p></o:p></span></pre>
</blockquote>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"MS
PGothic",sans-serif" lang="ES"> </span><span
lang="ES"><o:p></o:p></span></p>
</div>
</blockquote>
<p class="MsoNormal"><span style="mso-fareast-language:ES"
lang="ES"> </span><span lang="ES"><o:p></o:p></span></p>
</div>
</blockquote>
<p class="MsoNormal"><span style="mso-fareast-language:ES"
lang="ES"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><i><span style="mso-fareast-language:EN-US">Any
email and files/attachments transmitted with it are
confidential and are intended solely for the use of the
individual or entity to whom they are addressed. If this
message has been sent to you in error, you must not copy,
distribute or disclose of the information it contains.
<u>Please notify Entrust immediately</u> and delete the
message from your system.</span></i><span
style="mso-fareast-language:EN-US">
<o:p></o:p></span></p>
</div>
</blockquote>
</body>
</html>