<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso-8859-15">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><font face="Calibri">All,</font></p>
<p><font face="Calibri">I have a doubt regarding §14.2 of EV
guidelines, and particularly §14.2.2 (Enterprise RAs) that
reads: <br>
</font></p>
<font face="Calibri">"The CA MAY contractually authorize the Subject
of a specified Valid EV Certificate to perform the RA function and</font><font
face="Calibri"> authorize the CA to issue additional EV
Certificates at third and higher domain levels that are contained
within the domain</font><font face="Calibri"> of the original EV
Certificate (also known as an Enterprise EV Certificate). In such
case, the Subject SHALL be considered</font><font face="Calibri">
an Enterprise RA, and the following requirements SHALL apply: ..."</font>
<p><font face="Calibri">Now, let's assume that a certain company
owns/controls two or more domains, say xxx.com and yyy.net, and
that the "original EV Certificate" (quoted from above) was
issued by the CA for any one of those domains (say xxx.com):
under these conditions, would it be okay to authorize that
company to act as </font><font face="Calibri">an Enterprise RA
for the remaining 2nd-level domains that it owns/controls ? </font></p>
Based on §14.2.2, it seems not.<br>
<br>
Adriano<br>
<br>
</body>
</html>