<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><font face="Calibri">Once a company is authorized as an
Enterprise RA, they will normally get access to a web-based
certificate management portal. <br>
</font></p>
<p><font face="Calibri">And therefore, assuming that the company's
authorized operators are strongly authenticated to such portal,
the CA knows for certain that the subsequent certificate orders
do come from the same company.</font></p>
<p><font face="Calibri"></font><br>
</p>
<br>
<div class="moz-cite-prefix">Il 05/08/2016 12:05, Man Ho (Certizen)
ha scritto:<br>
</div>
<blockquote
cite="mid:e591f7f7-2405-ff69-d2a5-86208b5a6ba0@certizen.com"
type="cite"> The question is how the CA knows the 5 applications
submitted at different time are actually from the same company.
The CA still have to verify the company data anyway. Should it be
a simple check against an existing database record or a full
company search via QTIS/QGIS/QIIS, it depends on how old the
company data is. There exist other requirement in EV guideline to
govern the acceptable validity period of such company data.</blockquote>
<br>
<div class="moz-signature">-- <br>
<p style="font-family: Serif">
Cordiali saluti,<br>
<br>
Adriano Santoni<br>
ACTALIS S.p.A.<br>
(Aruba Group)</p>
</div>
</body>
</html>