<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Bonjour,</div>
<div class=""><br class="">
</div>
<div class="">(extracted from your answer below)</div>
<div class=""><br class="">
</div>
<div class="">
<blockquote type="cite" class="">
<div lang="ES" link="blue" vlink="purple" class="">
<div class="WordSection1">
<div class="">
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span lang="EN-US" class="">319411-1 requires the CA to apply NCP requirements to *all* EVCP certificates. NCP requirements implies physic</span>al presence verification (or equivalent: signed documents by an actor trusted to have physically performed the verification).
It’s the exact same level of verification performed to deliver a certificate to a natural person.<o:p class=""></o:p></div>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span class="" style="color: rgb(31, 73, 125);"> </span></p>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span class="" style="color: rgb(31, 73, 125);">IB </span><span class="" style="font-family: Wingdings; color: rgb(31, 73, 125);">à</span><span class="" style="color: rgb(31, 73, 125);"> yes, quite similar.<o:p class=""></o:p></span></div>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span class="" style="color: rgb(31, 73, 125);"> </span></p>
</div>
<div class="">
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span lang="EN-US" class="">EVG requires physical verification for some cases only (depending on matching between Place of Business and content of QGIS/QIIS/QTIS, if the country of Place of Business is different than the country of Incorporation/Registration,
etc).<o:p class=""></o:p></span></div>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" class="" style="color: rgb(31, 73, 125);"> </span></p>
<div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span lang="EN-US" class="" style="color: rgb(31, 73, 125);">IB </span><span lang="EN-US" class="" style="font-family: Wingdings; color: rgb(31, 73, 125);">à</span><span lang="EN-US" class="" style="color: rgb(31, 73, 125);"> yes.</span></div>
</div>
</div>
</div>
</blockquote>
</div>
<div class=""><br class="">
</div>
<div class="">This is precisely why I don’t want to replace 102042 by 319411-1 for EV certificates. There is no reason to impose physical presence verification for EV certificates if it’s not required by EV Guidelines.</div>
<div class=""><br class="">
</div>
<div class="">Requiring physical presence verification for a Qualified Certificate (QCP-w) as stated in 319411-2 is fine. But requiring the same physical presence verification for EVCP creates a distortion detrimental to European CAs.</div>
<div class=""><br class="">
</div>
<div class="">102042, despite being old, is simpler, as verification requirements SHALL be taken from BRG and EVCG, no more, no less.</div>
<div class=""><br class="">
</div>
<br class="">
<div class="">
<div class="">Cordialement,</div>
<div class="">Erwann Abalea</div>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">Le 23 juin 2016 à 10:04, Barreira Iglesias, Iñigo <<a href="mailto:i-barreira@izenpe.eus" class="">i-barreira@izenpe.eus</a>> a écrit :</div>
<br class="Apple-interchange-newline">
<div class="">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)" class="">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style class=""><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Cambria;
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Times;
panose-1:2 2 6 3 5 4 5 2 3 4;}
@font-face
{font-family:TimesNewRomanPSMT;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Times New Roman \,serif";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:SymbolMT;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texto de globo Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
span.TextodegloboCar
{mso-style-name:"Texto de globo Car";
mso-style-priority:99;
mso-style-link:"Texto de globo";
font-family:"Tahoma","sans-serif";}
span.EstiloCorreo22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EstiloCorreo23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EstiloCorreo24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EstiloCorreo26
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:104546684;
mso-list-type:hybrid;
mso-list-template-ids:1543027202 1510890772 201981955 201981957 201981953 201981955 201981957 201981953 201981955 201981957;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="ES" link="blue" vlink="purple" class="">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D" class="">Inline<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<div class="">
<p class="MsoNormal"><span style="color:#1F497D;mso-fareast-language:ES" class=""> </span></p>
<p class="MsoNormal" style="line-height:9.75pt"><b class=""><span lang="ES-TRAD" style="font-size: 8.5pt; font-family: Tahoma, sans-serif;" class="">Iñigo Barreira</span></b><span lang="ES-TRAD" style="font-size: 8.5pt; font-family: Tahoma, sans-serif;" class=""><br class="">
Responsable del Área técnica<br class="">
<a href="mailto:i-barreira@izenpe.eus" class="">i-barreira@izenpe.eus</a> <o:p class="">
</o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size: 8.5pt; font-family: Tahoma, sans-serif;" class="">945067705</span><span lang="ES-TRAD" style="color:#1F497D;mso-fareast-language:ES" class=""><o:p class=""></o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="color:#1F497D;mso-fareast-language:ES" class=""> </span></p>
<p class="MsoNormal"><span style="color:navy;mso-fareast-language:ES" class=""><span id="cid:image001.jpg@01D1CD2E.678D05A0"><image001.jpg></span><o:p class=""></o:p></span></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="color:#1F497D;mso-fareast-language:ES" class=""> </span></p>
<p class="MsoNormal" style="line-height:9.75pt"><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD" class="">ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea.
Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style="color:#888888;mso-fareast-language:ES-TRAD" class=""><br class="">
</span><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD" class="">ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted
lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><span style="font-size:12.0pt;color:navy;mso-fareast-language:ES-TRAD" class=""><o:p class=""></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<div class="">
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm" class="">
<p class="MsoNormal"><b class=""><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:ES" class="">De:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:ES" class=""> Erwann Abalea
[<a href="mailto:Erwann.Abalea@docusign.com" class="">mailto:Erwann.Abalea@docusign.com</a>]
<br class="">
<b class="">Enviado el:</b> miércoles, 22 de junio de 2016 18:33<br class="">
<b class="">Para:</b> Barreira Iglesias, Iñigo<br class="">
<b class="">CC:</b> <a href="mailto:public@cabforum.org" class="">public@cabforum.org</a><br class="">
<b class="">Asunto:</b> Re: [cabfpub] Ballot 171 - Updating ETSI standards in CABF documents<o:p class=""></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p class=""> </o:p></p>
<p class="MsoNormal">Iñigo, <o:p class=""></o:p></p>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<p class="MsoNormal">I’m fine with adding EN 319403 and EN 319411-1 as acceptable normative references.<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<p class="MsoNormal">What do you mean by « official bulletins »? If you mean receiving an official record of a company registration/incorporation, then I disagree. In many countries (France included), you can register/incorporate a company without any physical
verification.<o:p class=""></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">IB </span>
<span style="font-family:Wingdings;color:#1F497D" class="">à</span><span lang="EN-US" style="color:#1F497D" class=""> No, an official bulletin means a document published by the public administration when someone is named for a specific position, typically when
naming politicians. For example, when a new mayor of your city has been named, this has to be officially registered and then there´s no need for physical presence because is a public person. And that can be used as a verification method.
<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">But you can have additional measures, requirements to perform that validation. So, it´s up the TSP to provide that equivalent method, I´m not anyone to tell you how to do it.<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class=""> </span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">319411-1 requires the CA to apply NCP requirements to *all* EVCP certificates. NCP requirements implies physic</span>al presence verification (or equivalent: signed documents by an actor trusted to have physically
performed the verification). It’s the exact same level of verification performed to deliver a certificate to a natural person.<o:p class=""></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<p class="MsoNormal"><span style="color:#1F497D" class="">IB </span><span style="font-family:Wingdings;color:#1F497D" class="">à</span><span style="color:#1F497D" class=""> yes, quite similar.
<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">EVG requires physical verification for some cases only (depending on matching between Place of Business and content of QGIS/QIIS/QTIS, if the country of Place of Business is different than the country of Incorporation/Registration,
etc).<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class=""> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">IB </span>
<span lang="EN-US" style="font-family:Wingdings;color:#1F497D" class="">à</span><span lang="EN-US" style="color:#1F497D" class=""> yes.<o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span></p>
</div>
<div class="">
<p class="MsoNormal">I want to align the TS 102042 rejection date to its official withdrawal by ETSI.<o:p class=""></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">IB </span>
<span style="font-family:Wingdings;color:#1F497D" class="">à</span><span lang="EN-US" style="color:#1F497D" class=""> I don´t know when ETSI is going to withdraw the document but I´ve said repeatedly that the TS 102 042 hasn´t been updated for years, more than
2 years, and currently does not reflect any of the changes done in the CABF documents. It points to version 1.3 of the EV guidelines for example so I don´t think is a good idea to still use a standard which does not reflect updates for the last 2 years, even
worst, still uses the old “style” and when referring some sections in the EV or BRs, these are invalid because the new BRs for example are following the RFC 3647 style, as well as the 411-1.
<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class=""> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">It´s up to the auditor to determine if your “validation” method is good or not. I´ve also talked to my accredited auditor and they prefer to use the new one because is updated and easier.<o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span></p>
</div>
<div class="">
<p class="MsoNormal">Therefore, I’d like the motion to be changed like this:<o:p class=""></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">IB </span>
<span style="font-family:Wingdings;color:#1F497D" class="">à</span><span lang="EN-US" style="color:#1F497D" class=""> I´m not agree because with this change there´s no end date for the use of the TS 102 042 and unless there´s another motion and/or ballot this
can last for years. TS 102 042 is not going to be updated anymore (in fact, as said, hasn´t been for the last years) and don´t think is a good practice to use an “old” standard. In any case, apart of the issue you may have with the physical presence, can you
tell me more issues in 411-1 that are slightly different from the TS? At the end, I don´t understand your reluctant to accept the use of the 411-1. It seems to me there´s some other issues that I don´t understand<o:p class=""></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class=""> </span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">I´m able to accept other effective date if browsers consider this one (july 1<sup class="">st</sup> 2016) too early for their adjustments taking into account that TS 102 042 hasn´t been
updated for years and accepting that “risk” but it looks like a similar issue with the SHA-1 deprecation, there´s always against it for whatever reason despite has been communicated from time to time. We´ve been talking about it for the last 2 years, the document
has been circulated many times to start now with these questions.<o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" class="">-- MOTION BEGINS – </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b class=""><span lang="EN-US" class="">In the BRs,</span></b><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" class="">In section 1.6.3 References, change:</span><o:p class=""></o:p></p>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Cambria","serif"" class="">ETSI TS 119 403, Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment ‐ General Requirements and Guidance.</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><s class=""><span style="font-size:10.0pt;font-family:"Times","serif"" class="">ETSI TS 102 042, Electronic Signatures and Infrastructures (ESI); Policy requirements for certification authorities issuing public key certificates.</span></s>
<span style="font-size:12.0pt" class=""><o:p class=""></o:p></span></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" class="">With</span><span style="font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">ETSI EN 319 403, Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment - Requirements for conformity assessment bodies assessing Trust Service Providers</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal">and add:<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">ETSI EN 319 411-1, Electronic Signatures and Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates;</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">Part 1: General requirements</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" class="">In section 8.2 Identity/qualification of assessor, point 4, change:</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">4. (For audits conducted in accordance with any one of the ETSI standards) accredited in accordance with ETSI TS 119 403, or accredited to conduct
such audits under an equivalent national scheme, or accredited by a national accreditation body in line with ISO 27006 to carry out ISO 27001 audits;</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.5pt" class="">With</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:6.0pt;margin-left:18.0pt">
<span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">4. (For audits conducted in accordance with any one of the ETSI standards) </span><span lang="EN-US" style="font-family:"Times New Roman ,serif","serif"" class="">accredited
in accordance with ISO 17065 applying the requirements specified in ETSI EN 319 403</span><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">;</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:6.0pt;margin-left:18.0pt">
<span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" class="">In section 8.4 Topics covered by assessment, point 2, change:</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">2. A national scheme that audits conformance to ETSI TS 102 042;</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.5pt;font-family:"Helvetica","sans-serif"" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">2. A national scheme that audits conformance to ETSI TS 102 042/ ETSI EN 319 411-1; </span><s class=""><span style="font-size:10.0pt" class="">Effective
July 1st 2016, only the ETSI EN 319 411-1 criteria shall be accepted. Audit reports following the ETSI TS 102 042 criteria shall be accepted until July 1st 2017;</span></s><o:p class=""></o:p></p>
<div class="">
<p class="MsoNormal"><b class=""><span lang="EN-US" class="">In the EV guidelines,</span></b><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">In section 8.2.1 Implementation, point (B), change:</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(B)</span><span lang="EN-US" style="font-size:10.0pt;font-family:Symbol" class="">
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"SymbolMT","serif"" class=""> </span><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">Implement the requirements of (i) the then-current WebTrust Program
for CAs, and (ii) the then-current WebTrust</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">EV Program or ETSI TS 102 042; and</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.5pt" class="">With</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(B)</span><span lang="EN-US" style="font-size:10.0pt;font-family:Symbol" class="">
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"SymbolMT","serif"" class=""> </span><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">Implement the requirements of (i) the then-current WebTrust Program
for CAs, and (ii) the then-current WebTrust</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">EV Program or ETSI TS 102 042 for EVCP or ETSI EN 319 411-1 for EVCP policy; and</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">In section 8.2.2 Disclosure, change:</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">The CA is also REQUIRED to publicly disclose its CA business practices as required by both WebTrust for CAs and ETSI TS 102 042.</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.5pt" class="">With</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">The CA is also REQUIRED to publicly disclose its CA business practices as required by </span><s class=""><span style="font-size:10.0pt" class="">both</span></s><span style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> WebTrust
for CAs and ETSI TS 102 042 and ETSI EN 319 411-1.</span><span style="font-size:12.0pt" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">In section 17.1 Eligible audit schemes, point (ii), change:</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(ii) ETSI TS 102 042 audit</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.5pt" class="">With</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(ii) ETSI TS 102 042 audit for EVCP, or </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(iii) ETSI EN 319 411-1 audit for EVCP policy</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class="">In section 17.4 pre-issuance readiness audit, after point (2), add:</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><s class=""><span style="font-size:10.0pt" class="">(2) If the CA has a currently valid ETSI 102 042 audit, then, before issuing EV Certificates, the CA and its Root CA MUST</span></s><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><s class=""><span style="font-size:10.0pt" class="">successfully complete a point-in-time readiness assessment audit against ETSI TS 102 042.</span></s><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><s class=""><span style="font-size:10.0pt" class=""> </span></s><o:p class=""></o:p></p>
<p class="MsoNormal"><s class=""><span style="font-size:11.5pt;font-family:"Helvetica","sans-serif"" class="">With</span></s> <o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(3) If the CA has a currently valid ETSI EN 319 411-1 audit for EVCP policy, then, before issuing EV Certificates, the CA and its Root CA MUST
successfully complete a point-in-time readiness assessment audit against these ETSI standards.</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span style="font-size:11.5pt" class="">and change:</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(3) If the CA does not have a currently valid WebTrust Seal of Assurance for CAs or an ETSI 102 042 audit, then, before</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">issuing EV Certificates, the CA and its Root CA MUST successfully complete either: (i) a point-in-time readiness</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">assessment audit against the WebTrust for CA Program, or (ii) a point-in-time readiness assessment audit against the</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">WebTrust EV Program, or an ETSI TS 102 042 audit.</span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.5pt" class="">With</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(3) If the CA does not have a currently valid WebTrust Seal of Assurance for CAs or or an ETSI TS 102 042 EVCP or an ETSI EN 319 411-1 audit for
EVCP policy, then, before issuing EV Certificates, the CA and its Root CA MUST successfully complete either: (i) a point-in-time readiness assessment audit against the WebTrust for CA Program, or (ii) a point-in-time readiness assessment audit against the
WebTrust EV Program, or an ETSI TS 102 042 EVCP, or an ETSI EN 319 411-1 for EVCP policy.</span><o:p class=""></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" class="">-- MOTION ENDS -- </span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"" class=""><o:p class=""></o:p></span></p>
</div>
<div class="">
<p class="MsoNormal"><o:p class=""> </o:p></p>
</div>
<div class="">
<div class="">
<p class="MsoNormal">Cordialement,<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal">Erwann Abalea<o:p class=""></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p class=""> </o:p></p>
<div class="">
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt" class="">
<div class="">
<p class="MsoNormal">Le 21 juin 2016 à 12:58, Barreira Iglesias, Iñigo <<a href="mailto:i-barreira@izenpe.eus" class="">i-barreira@izenpe.eus</a>> a écrit :<o:p class=""></o:p></p>
</div>
<p class="MsoNormal"><o:p class=""> </o:p></p>
<div class="">
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">Erwann,</span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class=""> </span><o:p class=""></o:p></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo2"><!--[if !supportLists]--><span style="mso-list:Ignore" class="">-<span style="font:7.0pt "Times New Roman"" class="">
</span></span><!--[endif]--><span lang="EN-US" style="color:#1F497D" class="">I think I replied to the same question you asked me last week. You can use other appropriate methods, for example, official bulletins, etc.</span><o:p class=""></o:p></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo2"><!--[if !supportLists]--><span style="mso-list:Ignore" class="">-<span style="font:7.0pt "Times New Roman"" class="">
</span></span><!--[endif]--><span lang="EN-US" style="color:#1F497D" class="">This document has been presented many times over the last 2 years, requested for comments (even within the CABF), and finally approved by all EU MS. In any case, you can ask through
your official NSO or directly to ETSI and suggest amendments, corrections, etc. There´s an ongoing task within ESI to update the document to keep it aligned with the CABF changes.</span><o:p class=""></o:p></p>
<p class="MsoListParagraph" style="text-indent:-18.0pt;mso-list:l0 level1 lfo2"><!--[if !supportLists]--><span style="mso-list:Ignore" class="">-<span style="font:7.0pt "Times New Roman"" class="">
</span></span><!--[endif]--><span lang="EN-US" style="color:#1F497D" class="">TS 102 042 will be replaced soon, probably before the year ends, so not sure about keeping it.</span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D" class="">Regards</span><o:p class=""></o:p></p>
<div class="">
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D;mso-fareast-language:ES" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="line-height:9.75pt"><b class=""><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"" class="">Iñigo Barreira</span></b><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"" class=""><br class="">
Responsable del Área técnica<br class="">
<a href="mailto:i-barreira@izenpe.eus" class="">i-barreira@izenpe.eus</a> </span>
<o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"" class="">945067705</span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="color:#1F497D;mso-fareast-language:ES" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal"><span style="color:navy;mso-fareast-language:ES" class=""><image001.jpg></span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="color:#1F497D;mso-fareast-language:ES" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="line-height:9.75pt"><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD" class="">ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea.
Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style="color:#888888;mso-fareast-language:ES-TRAD" class=""><br class="">
</span><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD" class="">ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted
lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><o:p class=""></o:p></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D" class=""> </span><o:p class=""></o:p></p>
<div class="">
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm" class="">
<p class="MsoNormal"><b class=""><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:ES" class="">De:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";mso-fareast-language:ES" class=""> Erwann Abalea
[<a href="mailto:Erwann.Abalea@docusign.com" class="">mailto:Erwann.Abalea@docusign.com</a>]
<br class="">
<b class="">Enviado el:</b> lunes, 20 de junio de 2016 21:19<br class="">
<b class="">Para:</b> Barreira Iglesias, Iñigo<br class="">
<b class="">CC:</b> <a href="mailto:public@cabforum.org" class="">public@cabforum.org</a><br class="">
<b class="">Asunto:</b> Re: [cabfpub] Ballot 171 - Updating ETSI standards in CABF documents</span><o:p class=""></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p class=""></o:p></p>
<p class="MsoNormal">Bonsoir, <o:p class=""></o:p></p>
<div class="">
<p class="MsoNormal"> <o:p class=""></o:p></p>
<div class="">
<div class="">
<div class="">
<p class="MsoNormal">I think EN 319 411-1 is not ready for EV certificates as some requirements are more stringent than 102 042 EVCP.<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal">Reading this document, we found, and it was confirmed by our accredited auditor, that the validation step requires physical presence of the subscriber or means equivalent to physical presence. Find below an excerpt of section 6.2.2 Initial
identity validation:<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> <o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> h) [CONDITIONAL] [NCP]: If the subject is a device or system operated by or on behalf of a legal person, or other organizational entity identified in association with a legal person, evidence of the identity, in particular the ones
listed in i), shall be checked against a duly mandated subscriber either directly, by physical presence of a person, or have been checked indirectly using means which provides equivalent assurance to physical presence.<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> <o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> i) [CONDITIONAL]: If the subject is a device or system operated by or on behalf of a legal person, or other organizational entity identified in association with a legal person, evidence shall be provided of:<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> 1) identifier of the device by which it can be referenced (e.g. Internet domain name);<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> 2) full name of the organizational entity:<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> * [PTC]: clause 3.2.2 of BRG [5] shall apply;<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> * [EVCP]: EVCG [4], clause 11.2.1, shall apply;<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> 3) any relevant existing registration information (e.g. company registration) of the legal person or other organizational entity identified in association with the legal person that would appear in the organization attribute of
the certificate, consistent with the national or other applicable identification practices;<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> 4) a nationally recognized identity number, or other attributes which can be used to, as far as possible, distinguish the organizational entity from others with the same name; and<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> 5) [CONDITIONAL]: when applicable, the association between the legal person and the other organizational entity identified in association with this legal person that would appear in the organization attribute of the certificate,
consistent with the national or other applicable identification practices.<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> <o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal">This physical presence (face-to-face) of the subscriber is required by EV Guidelines when the subject is a Business Entity only, to verify the identity of the Principal Individual. This face-to-face validation is not required for Private
Organizations, Government Entities, and Non-Commercial Entities.<o:p class=""></o:p></p>
</div>
</div>
<div class="">
<p class="MsoNormal"> <o:p class=""></o:p></p>
</div>
</div>
<div class="">
<p class="MsoNormal">In addition to that, ETSI has not withdrawn the current standard TS 102 042. If we apply too quickly EN 319 411-1 before it’s updated, it will add some constraints on European CAs only and thus create a gap between European and non-European
CAs.<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> <o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal"> <o:p class=""></o:p></p>
<div class="">
<div class="">
<p class="MsoNormal">Cordialement,<o:p class=""></o:p></p>
</div>
<div class="">
<p class="MsoNormal">Erwann Abalea<o:p class=""></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p class=""></o:p></p>
<div class="">
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt" class="">
<div class="">
<p class="MsoNormal">Le 17 juin 2016 à 11:43, Barreira Iglesias, Iñigo <<a href="mailto:i-barreira@izenpe.eus" class="">i-barreira@izenpe.eus</a>> a écrit :<o:p class=""></o:p></p>
</div>
<p class="MsoNormal"> <o:p class=""></o:p></p>
<div class="">
<div class="">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><strong class=""><span lang="EN-US" style="font-size:12.0pt;font-family:"Calibri","sans-serif";mso-fareast-language:ES" class="">Ballot 171 – Updating the ETSI standards in the
CABF documents</span></strong><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">The following motion has been proposed by Iñigo Barreira of Izenpe
and endorsed by Mads Henriksveen of Buypass, Jochem van den Berge of Logius PKIoverheid and Arno Fiedler of D-trust
</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">-- MOTION BEGINS –
</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b class=""><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">In the BRs,</span></b><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">In section 1.6.3 References, change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"Cambria","serif"" class="">ETSI TS 119 403, Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment ‐ General Requirements
and Guidance.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"Cambria","serif"" class="">ETSI TS 102 042, Electronic Signatures and Infrastructures (ESI); Policy requirements for certification authorities issuing public
key certificates.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">ETSI EN 319 403, Electronic Signatures and Infrastructures (ESI); Trust Service Provider Conformity Assessment - Requirements for conformity assessment bodies assessing Trust Service
Providers</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">ETSI EN 319 411-1, Electronic Signatures and Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates;</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">Part 1: General requirements</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">In section 8.2 Identity/qualification of assessor, point 4, change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">4. (For audits conducted in accordance with any one of the ETSI standards) accredited in accordance with ETSI TS 119
403, or accredited to conduct such audits under an equivalent national scheme, or accredited by a national accreditation body in line with ISO 27006 to carry out ISO 27001 audits;</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:6.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:18.0pt;text-autospace:none">
<span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">4. (For audits conducted in accordance with any one of the ETSI standards) </span><span lang="EN-US" style="font-family:"Times New Roman ,serif","serif"" class="">accredited
in accordance with ISO 17065 applying the requirements specified in ETSI EN 319 403</span><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">;</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:6.0pt;margin-right:0cm;margin-bottom:6.0pt;margin-left:18.0pt;text-autospace:none">
<span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">In section 8.4 Topics covered by assessment, point 2, change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif";mso-fareast-language:ES" class="">2. A national scheme that audits conformance to ETSI TS 102
042;</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif";mso-fareast-language:ES" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif";mso-fareast-language:ES" class="">2. A national scheme that audits conformance to ETSI TS 102
042/ ETSI EN 319 411-1; Effective July 1st 2016, only the ETSI EN 319 411-1 criteria shall be accepted. Audit reports following the ETSI TS 102 042 criteria shall be accepted until July 1st 2017;</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><b class=""><span lang="EN-US" class="">In the EV guidelines,</span></b><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">In section 8.2.1 Implementation, point (B), change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(B)</span><span lang="EN-US" style="font-size:10.0pt;font-family:"SymbolMT","serif"" class=""></span><span lang="EN-US" style="font-size:10.0pt;font-family:"SymbolMT","serif"" class="">
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">Implement the requirements of (i) the then-current WebTrust Program for CAs, and (ii) the then-current WebTrust</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">EV Program or ETSI TS 102 042; and</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(B)</span><span lang="EN-US" style="font-size:10.0pt;font-family:"SymbolMT","serif"" class=""></span><span lang="EN-US" style="font-size:10.0pt;font-family:"SymbolMT","serif"" class="">
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">Implement the requirements of (i) the then-current WebTrust Program for CAs, and (ii) the then-current WebTrust</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">EV Program or ETSI EN 319 411-1 for EVCP policy; and</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">In section 8.2.2 Disclosure, change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">The CA is also REQUIRED to publicly disclose its CA business practices as required by both WebTrust for CAs and ETSI
TS 102 042.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">The CA is also REQUIRED to publicly disclose its CA business practices as required by both WebTrust for CAs and ETSI
EN 319 411-1.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">In section 17.1 Eligible audit schemes, point (ii), change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(ii) ETSI TS 102 042 audit</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(ii) ETSI EN 319 411-1 audit for EVCP policy
</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">In section 17.4 pre-issuance readiness audit, point (2), change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(2) If the CA has a currently valid ETSI 102 042 audit, then, before issuing EV Certificates, the CA and its Root CA
MUST</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">successfully complete a point-in-time readiness assessment audit against ETSI TS 102 042.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(2) If the CA has a currently valid ETSI EN 319 411-1 audit for EVCP policy, then, before issuing EV Certificates,
the CA and its Root CA MUST successfully complete a point-in-time readiness assessment audit against these ETSI standards.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class="">In section 17.4 pre-issuance readiness audit, point (3), change:</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(3) If the CA does not have a currently valid WebTrust Seal of Assurance for CAs or an ETSI 102 042 audit, then, before</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">issuing EV Certificates, the CA and its Root CA MUST successfully complete either: (i) a point-in-time readiness</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">assessment audit against the WebTrust for CA Program, or (ii) a point-in-time readiness assessment audit against the</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">WebTrust EV Program, or an ETSI TS 102 042 audit.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">With</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:10.0pt;font-family:"TimesNewRomanPSMT","serif"" class="">(3) If the CA does not have a currently valid WebTrust Seal of Assurance for CAs or an ETSI EN 319 411-1 audit for
EVCP policy, then, before issuing EV Certificates, the CA and its Root CA MUST successfully complete either: (i) a point-in-time readiness assessment audit against the WebTrust for CA Program, or (ii) a point-in-time readiness assessment audit against the
WebTrust EV Program, or an ETSI EN 319 411-1 for EVCP policy.</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">-- MOTION ENDS --
</span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">The review period for this ballot shall commence at 2200 UTC on
17 June 2016, and will close at 2200 UTC on 24 June 2016. Unless the motion is withdrawn during the review period, the voting period will start immediately thereafter and will close at 2200 UTC on 1 July 2016. Votes must be cast by posting an on-list reply
to this thread. </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">A vote in favor of the motion must indicate a clear 'yes' in the
response. A vote against must indicate a clear 'no' in the response. A vote to abstain must indicate a clear 'abstain' in the response. Unclear responses will not be counted. The latest vote received from any representative of a voting member before the close
of the voting period will be counted. Voting members are listed here: <a href="https://cabforum.org/members/" target="_blank" class="">
https://cabforum.org/members/</a> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">In order for the motion to be adopted, two thirds or more of the
votes cast by members in the CA category and greater than 50% of the votes cast by members in the browser category must be in favor. Quorum is currently ten (10) members– at least ten members must participate in the ballot, either by voting in favor, voting
against, or abstaining. </span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="EN-US" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:ES" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="line-height:9.75pt"><b class=""><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"" class="">Iñigo Barreira</span></b><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"" class=""><br class="">
Responsable del Área técnica<br class="">
<a href="mailto:i-barreira@izenpe.eus" class="">i-barreira@izenpe.eus</a> </span>
<o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="font-size:8.5pt;font-family:"Tahoma","sans-serif"" class="">945067705</span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="mso-fareast-language:ES" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal"><span style="color:navy;mso-fareast-language:ES" class=""><image001.jpg></span><o:p class=""></o:p></p>
<p class="MsoNormal"><span lang="ES-TRAD" style="mso-fareast-language:ES" class=""> </span><o:p class=""></o:p></p>
<p class="MsoNormal" style="line-height:9.75pt"><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD" class="">ERNE! Baliteke mezu honen zatiren bat edo mezu osoa legez babestuta egotea. Mezua badu bere hartzailea.
Okerreko helbidera heldu bada (helbidea gaizki idatzi, transmisioak huts egin) eman abisu igorleari, korreo honi erantzuna. KONTUZ!</span><span style="color:#888888;mso-fareast-language:ES-TRAD" class=""><br class="">
</span><span style="font-size:7.5pt;font-family:"Tahoma","sans-serif";color:#888888;mso-fareast-language:ES-TRAD" class="">ATENCION! Este mensaje contiene informacion privilegiada o confidencial a la que solo tiene derecho a acceder el destinatario. Si usted
lo recibe por error le agradeceriamos que no hiciera uso de la informacion y que se pusiese en contacto con el remitente.</span><o:p class=""></o:p></p>
<p class="MsoNormal"> <o:p class=""></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class="">_______________________________________________<br class="">
Public mailing list<br class="">
<a href="mailto:Public@cabforum.org" class="">Public@cabforum.org</a><br class="">
<a href="https://cabforum.org/mailman/listinfo/public" class="">https://cabforum.org/mailman/listinfo/public</a></span><o:p class=""></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class=""> </span><o:p class=""></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:ES" class=""> </span></p>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</body>
</html>