<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
p.Default, li.Default, div.Default
{mso-style-name:Default;
margin:0in;
margin-bottom:.0001pt;
text-autospace:none;
font-size:12.0pt;
font-family:"Calibri Light",sans-serif;
color:black;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">CPA Canada has released a new draft of its WebTrust Principles and Criteria for Certification Authorities – SSL Baseline with Network Security, Version 2.2. See attached. Jeff Ward, our WebTrust delegate, will respond to any comments
or questions.<o:p></o:p></p>
<p class="MsoNormal">Jeff Ward has invited comments on this new draft. Please note that it addresses the recent Ballots 80 and 181 at pages 34 as follows:<o:p></o:p></p>
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" style="margin-left:-5.4pt;border-collapse:collapse;border:none">
<tbody>
<tr style="height:105.2pt">
<td valign="top" style="border:solid windowtext 1.0pt;padding:0in 5.4pt 0in 5.4pt;height:105.2pt">
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%">3.2.2.4
<o:p></o:p></span></p>
</td>
<td valign="top" style="border:solid windowtext 1.0pt;border-left:none;padding:0in 5.4pt 0in 5.4pt;height:105.2pt">
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%">7 January 2017
<o:p></o:p></span></p>
</td>
<td valign="top" style="border:solid windowtext 1.0pt;border-left:none;padding:0in 5.4pt 0in 5.4pt;height:105.2pt">
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%">Baseline Requirements v1.3.8 replaced the entirety of the domain validation requirements in this section with new requirements. These were subsequently amended again
in v1.4.2. <o:p></o:p></span></p>
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%"><o:p> </o:p></span></p>
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%">For certificates issued on or before 6 January 2017, the auditor is directed to consider the domain validation requirements in Section 3.2.2.4 of Baseline Requirements
v1.3.6. <o:p></o:p></span></p>
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%"><o:p> </o:p></span></p>
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%">For certificates issued on or after 7 January 2017, the auditor is directed to consider the domain validation requirements in Section 3.2.2.4 of Baseline Requirements
v1.4.2. <o:p></o:p></span></p>
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%"><o:p> </o:p></span></p>
<p class="Default" style="line-height:106%"><span style="font-size:11.0pt;line-height:106%">NOTE: Additional amendments to Section 3.2.2.4 are likely in 2017 and the auditor is encouraged to check subsequent versions of the Baseline Requirements and the effective
dates of any amendments to this section. <o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>