<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.xl63, li.xl63, div.xl63
{mso-style-name:xl63;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:10.0pt;
font-family:"Times New Roman",serif;
color:black;
font-weight:bold;}
p.xl64, li.xl64, div.xl64
{mso-style-name:xl64;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:10.0pt;
font-family:"Times New Roman",serif;
color:black;
font-weight:bold;}
p.xl65, li.xl65, div.xl65
{mso-style-name:xl65;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.xl66, li.xl66, div.xl66
{mso-style-name:xl66;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.xl67, li.xl67, div.xl67
{mso-style-name:xl67;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.xl68, li.xl68, div.xl68
{mso-style-name:xl68;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.xl69, li.xl69, div.xl69
{mso-style-name:xl69;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.xl70, li.xl70, div.xl70
{mso-style-name:xl70;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.xl71, li.xl71, div.xl71
{mso-style-name:xl71;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
border:none;
padding:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Last week the Policy Review Working Group reviewed version 1.3 of the Baseline Requirements (BRs) and compared it with version 1.2.5 of the BRs and RFC 3647. We only got through section 6--we didn’t get to Sections 7, 8 or 9. We identified gaps and labelled them as “No Stipulation/Not Applicable” (Yellow), “Important to Address” (Magenta), “Potential Content” (Light Blue) (for sections where we thought something should/could go), and we identified a few places where a cross-reference would avoid redundancy (Red). See below. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’ll circulate our review of sections 7, 8 and 9 after the next working group meeting, but I’m sending this out just in case anyone wants to discuss this on Thursday’s call.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=938 style='width:703.6pt;margin-left:-.15pt;border-collapse:collapse'><tr style='height:15.0pt'><td width=62 style='width:46.2pt;border:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><b><span style='font-size:10.0pt;color:black'>BR v.1.3<o:p></o:p></span></b></p></td><td width=425 style='width:318.5pt;border:solid windowtext 1.0pt;border-left:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><b><span style='font-size:10.0pt;color:black'>Title<o:p></o:p></span></b></p></td><td width=452 style='width:338.9pt;border:solid windowtext 1.0pt;border-left:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><b><span style='font-size:10.0pt;color:black'>Title in BR v. 1.2.5 / Proposed Resolution of Gap<o:p></o:p></span></b></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap valign=bottom style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td><td width=425 nowrap valign=bottom style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap valign=top style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Introduction<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Intro<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Overview<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Scope<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Document name and Identification<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Reserved Certificate Policy Identifiers<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.2.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Revisions<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Document History<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.2.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Relevant Dates<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Relevant Compliance Dates<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>PKI Participants<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.3.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certification Authorities<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Intro<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.3.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Registration Authorities<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.3.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Subscribers<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.3.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Relying Parties<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Intro<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.3.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Other Participants<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Intro<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate Usage<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Purpose<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.4.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Appropriate Certificate Uses<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.4.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Prohibited Certificate Uses<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Policy administration<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Notice to Readers<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.5.1<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Organization administering the document<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Notice to Readers<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.5.2<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Contact Person<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.5.3<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Person determining CPS suitability for the policy<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border-top:none;border-left:solid windowtext 1.0pt;border-bottom:none;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.5.4<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>CPS approval procedures<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Definitions and acronyms<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.6.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Definitions<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Definitions<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.6.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Acronyms<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Abbreviations and Acronyms<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.6.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>References<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>References<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>1.6.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Conventions<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Conventions<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>2<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>PUBLICATION AND REPOSITORY RESPONSIBILITIES<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Implementation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>2.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Repositories<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Mechanisms<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>2.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Publication of information<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Disclosure, Commitment to Comply<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>2.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Time or frequency of publication<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>2.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Access controls on repositories<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>IDENTIFICATION AND AUTHENTICATION<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Naming<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.1.1<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Types of names<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.1.2<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Need for names to be meaningful<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.1.3<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Anonymity or pseudonymity of subscribers<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.1.4<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><a name="RANGE!B37"><span style='color:black'>Rules for interpreting various name forms</span></a><span style='color:black'><o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.1.5<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Uniqueness of names<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.1.6<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Recognition, authentication, and role of trademarks<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Initial identity validation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Method to Prove Possession of Private Key<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Authentication of Organization and Domain Identity<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Verification of Subject Identity Information<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.1<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identity <o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identity <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.2<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>DBA/Tradename<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>DBA/Tradename<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.3<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Verification of Country<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Verification of Country<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.4<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Authorization by Domain Name Registrant<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Authorization by Domain Name Registrant<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.5<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Authentication for an IP Address<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Authentication for an IP Address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.6<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Wildcard Domain Validation<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Wildcard Domain Validation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.2.7<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Data Source Accuracy<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Data Source Accuracy<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Authentication of Individual Identity<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Verification of Individual Applicant<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Non-verified Subscriber Information<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Validation of Authority<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Authenticity of Certificate Request<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.2.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Criteria for Interoperation or Certification<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Trust Model<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identification and authentication for re-key requests<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.3.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identification and Authentication for Routine Re-key<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Age of Certificate Data<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.3.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identification and Authentication for Re-key After Revocation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>3.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identification and authentication for revocation request<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>CERTIFICATE LIFE-CYCLE OPERATIONAL REQUIREMENTS<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate Application<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.1.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Who Can Submit a Certificate Application<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Denied List<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.1.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Enrollment Process and Responsibilities<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Documentation Requirements, Certificate Request<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate application processing<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.2.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Performing Identification and Authentication Functions<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Information Requirements, High Risk Requests, <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.2.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Approval or Rejection of Certificate Applications<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>New gTLD Domains<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.2.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Time to Process Certificate Applications<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate issuance<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.3.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>CA Actions during Certificate Issuance<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate Issuance by a Root CA<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.3.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Notification of Certificate Issuance<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate acceptance<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key pair and certificate usage<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.5.1<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Subscriber private key and certificate usage<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.5.2<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Relying party public key and certificate usage<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate renewal<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate re-key<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.8.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate modification<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate revocation and suspension<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Circumstances for Revocation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.1.1<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Reasons for Revoking a Subscriber Certificate<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Reasons for Revoking a Subscriber Certificate<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.1.2<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Reasons for Revoking a Subordinate CA Certificate<o:p></o:p></span></p></td><td width=452 nowrap style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Reasons for Revoking a Subordinate CA Certificate<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Who Can Request Revocation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:red;mso-highlight:red'>See Section 3.4</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Procedure for Revocation Request<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>revocation Request, Certificate Problem Reporting<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Revocation Request Grace Period<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Time within which CA Must Process the Revocation Request<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Investigation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Revocation Checking Requirement for Relying Parties<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>CRL Issuance Frequency<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Repository<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.8.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Maximum Latency for CRLs<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.9.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>On-line Revocation/Status Checking Availability<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>OCSP Signing<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.10.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>On-line Revocation Checking Requirements<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Repository, Response for non-issued certificates<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.11.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Other Forms of Revocation Advertisements Available<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.12.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Special Requirements Related to Key Compromise<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.13.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Circumstances for Suspension<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate Suspension<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.14.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Who Can Request Suspension<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>Not applicable<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.15.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Procedure for Suspension Request<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>Not applicable<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.9.16.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Limits on Suspension Period<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>Not applicable<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.10.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate status services<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.10.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Operational Characteristics<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Deletion of Entries<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.10.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Service Availability<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Repository, Response, Response Time<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.10.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Optional Features<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.11.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>End of subscription<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>4.12.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key escrow and recovery<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>MANAGEMENT, OPERATIONAL, AND PHYSICAL CONTROLS<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Data Security, Objectives, Risk Assessment, Security Plan, System Security<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Physical security Controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Procedural controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.2.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Trusted Roles<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.2.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Number of Individuals Required per Task<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Protection<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.2.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identification and Authentication for Trusted Roles<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.2.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Roles Requiring Separation of Duties<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Personnel controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Qualifications, Experience, and Clearance Requirements<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Identity and Background Verification<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Background Check Procedures<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Training Requirements and Procedures<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Training and Skill Level<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Retraining Frequency and Requirements<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Training and Skill Level<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Job Rotation Frequency and Sequence<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Sanctions for Unauthorized Actions<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Independent Contractor Controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Delegation of Functions, General<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.3.8.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Documentation Supplied to Personnel<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Audit logging procedures<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Types of Events Recorded<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Documentation, Event Logging, Events, Actions<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Frequency for Processing and Archiving Audit Logs<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Retention Period for Audit Logs<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Events and Actions<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Protection of Audit Log<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Audit Log Backup Procedures<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Audit Log Accumulation System (internal vs. external)<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Notification to Event-Causing Subject<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.4.8.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Vulnerability Assessments<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Risk Assessment<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Records archival<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Types of Records Archived<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Retention Period for Archive<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Documentation Retention<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Protection of Archive<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Archive Backup Procedures<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Requirements for Time-stamping of Records<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Archive Collection System (internal or external)<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.5.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Procedures to Obtain and Verify Archive Information<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key changeover<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Compromise and disaster recovery<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.7.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Incident and Compromise Handling Procedures<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Business Continuity<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.7.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Recovery Procedures if Computing Resources, ... Are Corrupted<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.7.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Recovery Procedures After Key Compromise<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.7.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Business Continuity Capabilities after a Disaster<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:red;mso-highlight:red'>See Section 5.7.1.</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>5.8.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>CA or RA termination<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>TECHNICAL SECURITY CONTROLS<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key pair generation and installation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key Pair Generation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.1.1<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>CA Key Pair Generation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key Generation Ceremony<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.1.2<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>RA Key Pair Generation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.1.3<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Subscriber Key Pair Generation<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Public Key<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Delivery to Subscriber<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Subscriber Privvate Key<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Public Key Delivery to Certificate Issuer<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>CA Public Key Delivery to Relying Parties<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key Sizes<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Cryptographic Algorithm and Key Requirements<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Public Key Parameters Generation and Quality Checking<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Cryptographic Algorithm and Key Requirements<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.1.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Key Usage Purposes<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate Issuance by a Root CA<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Protection and Cryptographic Module Engineering Controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Protection<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Cryptographic Module Standards and Controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key (n out of m) Multi-person Control<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Escrow<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Backup<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>See Section 5.2.2.Private Key Archival<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Subordinate CA Private Key<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Transfer into or from a Cryptographic Module<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Subordinate CA Private Key<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Storage on Cryptographic Module<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Private Key Protection<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.8.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Activating Private Keys<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.9.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Deactivating Private Keys<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.10.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Destroying Private Keys<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.2.11.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Cryptographic Module Capabilities<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.3.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Other aspects of key pair management<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.3.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Public Key Archival<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.3.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Certificate Operational Periods and Key Pair Usage Periods<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Subscriber Certificates, Validity Period<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.4.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Activation data<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.5.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Computer security controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.5.1.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Specific Computer Security Technical Requirements<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>System Security <o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.5.2.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Computer Security Rating<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:yellow;mso-highlight:yellow'>No Stipulation</span><span style='color:black'><o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.6.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Life cycle technical controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.7.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Network security controls<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:fuchsia;mso-highlight:fuchsia'>Important to address<o:p></o:p></span></p></td></tr><tr style='height:15.0pt'><td width=62 nowrap style='width:46.2pt;border:solid windowtext 1.0pt;border-top:none;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>6.8.<o:p></o:p></span></p></td><td width=425 nowrap style='width:318.5pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black'>Time-stamping<o:p></o:p></span></p></td><td width=452 nowrap valign=bottom style='width:338.9pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:15.0pt'><p class=MsoNormal><span style='color:black;background:aqua;mso-highlight:aqua'>Potential content</span><span style='color:black'><o:p></o:p></span></p></td></tr></table><p class=MsoNormal><o:p> </o:p></p></div></body></html>