<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"Segoe Pro";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Segoe UI",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif">As many of you know, Microsoft requires all Program participants to sign a new agreement. As part of this process, some CAs have asked us to communicate the changes we intend to publish to
our websites as part of our November update cycle so that the CA can be confident that the agreement they are signing will not put them at risk of violating a Program term. At the last CAB Forum meeting, I agreed to send a draft of the Program and Audit requirements
to this list for review, so please find them attached. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif">The changes attached are what Microsoft is currently considering adopting as program rules in November.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif">Please let me know if you have any questions.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif">Thank you,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:12.0pt;font-family:"Segoe UI",sans-serif">Jody Cloutier<o:p></o:p></span></b></p>
<p class="MsoNormal"><i><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif">Senior Security Program Manager<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><a href="http://aka.ms/rootcert"><b><span style="font-size:9.0pt;color:#0563C1">Microsoft Trusted Root Certificate Program</span></b></a></span><b><u><span style="color:#0563C1"><o:p></o:p></span></u></b></p>
<p class="MsoNormal"><b><u><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif;color:#5B9BD5">O</span></u></b><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif">perating
<b><u><span style="color:#ED7D31">S</span></u></b>ystems <b><u><span style="color:red">G</span></u></b>roup</span><i><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif">
</span></i><b><u><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif">G</span></u></b><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif">lobal
<b><u>R</u></b>isk Management and <b><u>C</u></b>ompliance<u><span style="color:#0563C1"><o:p></o:p></span></u></span></p>
<p class="MsoNormal"><a href="sip:jodycl@microsoft.com" title="send an IM to Stein Dolan"><span style="font-family:"Segoe UI",sans-serif;color:windowtext;text-decoration:none"><img border="0" width="55" height="16" id="Picture_x0020_1" src="cid:image001.png@01D0EFB8.FCBDC320" alt="cid:image001.png@01D066D6.E5E48E60"></span></a><a href="tel:+1%20(425)%20705-7566" title="Call Stein Dolan's Work Number"><span style="font-family:"Segoe UI",sans-serif;color:windowtext;text-decoration:none"><img border="0" width="65" height="16" id="Picture_x0020_2" src="cid:image002.png@01D0EFB8.FCBDC320" alt="cid:image002.png@01D066D6.E5E48E60"></span></a><a href="mailto:jodycl@microsoft.com" title="Email Stein Dolan"><span style="font-family:"Segoe UI",sans-serif;color:windowtext;text-decoration:none"><img border="0" width="55" height="16" id="Picture_x0020_3" src="cid:image003.png@01D0EFB8.FCBDC320" alt="cid:image003.png@01D066D6.E5E48E60"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><a href="http://microsoft.com/"><span style="font-size:8.0pt;font-family:"Segoe UI",sans-serif;color:#0072BC;border:none windowtext 1.0pt;padding:0in;text-decoration:none"><img border="0" width="122" height="26" id="Picture_x0020_11" src="cid:image004.png@01D0EFB8.FCBDC320" alt="https://brandtools.microsoft.com/Style%20Library/BT/Images/MicrosoftMasterLogo.png"></span></a><span style="font-family:"Segoe Pro""><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
</div>
</body>
</html>