<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>All,<o:p></o:p></p><p class=MsoNormal>Attached is the Public Exposure Draft of WebTrust for CAs Based on the Baseline Requirements. <o:p></o:p></p><p class=MsoNormal>For CA/B Forum members it is also located here:<o:p></o:p></p><p class=MsoNormal><a href="https://www.cabforum.org/wiki/Audit?action=AttachFile&do=get&target=WTCA+-+SSL+Baseline+Requirements+v1_0_Draft_20120228_clean_exposure.doc">https://www.cabforum.org/wiki/Audit?action=AttachFile&do=get&target=WTCA+-+SSL+Baseline+Requirements+v1_0_Draft_20120228_clean_exposure.doc</a> .<o:p></o:p></p><p class=MsoNormal>As you know, version 1.0 of the Baseline Requirements became effective on July 1, 2012, subject to the adoption of audit criteria by the Web Trust Task Force and ETSI. ETSI and WebTrust are working on a date on which the Baseline Requirements will begin to be auditable. The CABF will provide notice of that date. (Just for clarification, an auditor cannot apply audit criteria retroactively, and even though CA members of the CA / Browser Forum have implemented migration plans in order to comply with the BRs as of July 1, 2012 (to demonstrate compliance if needed), compliance is not otherwise mandated by Web Trust / ETSI for purposes of the Forum or Browsers until the audit guidance is effective. So as a practical matter the BRs do not come into effect until there is auditability / audit guidance, and then compliance can only be looked at prospectively, unless of course a Browser mandates it or otherwise determines they are ready to enforce it before the stated date by ETSI / WebTrust.<o:p></o:p></p></div></body></html>