<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>To follow up, first, I agree with Ryan that issuance w/out either registration number or registration date is prohibited under current EVG text.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’d like to see us make some change to the Guidelines to address this because I’ve come across several examples over the years where this has been the case. I think the basic assumption that one or the other would generally be available is generally true for a standard corporate registration, though not in every jurisdiction.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Where I’ve come across this, to the best of my recollection, and as in this case, has been banks and other financial institutions, or possibly insurance companies, and the like where they are registered and administered by government entities other than the standard corporate registries.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This particular case is a bank in India. Banks in India are registered with and overseen by the Reserve Bank of India. They maintain a list of banks here:<o:p></o:p></p><p class=MsoNormal><a href="https://rbi.org.in/scripts/AboutUsDisplay.aspx?pg=RegionalRuralBanks.htm">https://rbi.org.in/scripts/AboutUsDisplay.aspx?pg=RegionalRuralBanks.htm</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>As you can see, they show bank name, address, phone number and website. Our validation agents report that they have contacted the RBI by phone and were unable to obtain the required information.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Possible solution, taking Ryan’s comments to mind:<o:p></o:p></p><p class=MsoNormal>Change “CA SHALL” to “CA SHOULD”, with additional guidance that exceptions MUST be posted for Forum review/discussion to the Public list no fewer than 7 days prior to issuance. Thereafter, issuance may take place if no member can point out another source from which the required information may be obtained, and the exception will be logged/tracked in an added Appendix to the EVGs<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thoughts?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Regards,<o:p></o:p></p><p class=MsoNormal>Rich<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Public [mailto:public-bounces@cabforum.org] <b>On Behalf Of </b>Geoff Keating via Public<br><b>Sent:</b> Thursday, August 31, 2017 5:36 PM<br><b>To:</b> Kirk Hall <Kirk.Hall@entrustdatacard.com>; CA/Browser Forum Public Discussion List <public@cabforum.org><br><b>Subject:</b> Re: [cabfpub] EV 11.2.1 Private Organization registration number or date<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>On 31 Aug 2017, at 2:42 pm, Kirk Hall via Public <<a href="mailto:public@cabforum.org">public@cabforum.org</a>> wrote:<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>Geoff – clearly this applicant will now be denied, but I have to disagree with one of your underlying assumptions below -<span class=apple-converted-space> </span>“there is no way to uniquely identify the entity”. Rich Smith of Comodo indicated that the applicant’s corporate registration had been confirmed with the government authority – perhaps based on address or some other identifying factor. Again, when we drafted the EVGL (I think I drafted this particular section), we assumed there would be a registration number or date of registration in all records (we were wrong), but even without that, a CA would have the ability to confirm proper corporate registration tied to the applicant’s unique identity so that identity would be confirmed.<span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p></div></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Even assuming that there isn’t the possibility of two simultaneous registrations of different entities with the same name (hopefully the government authority prevents this), one question is whether, in future, this entity could dissolve, and a new distinct entity could be created with the same name at the same address. I don’t know what kind of entity we’re talking about, so I don’t know how easy this would be. In some cases, for example partnerships in the US, this happens routinely and frequently.<o:p></o:p></p></div><p class=MsoNormal><br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>I think we should amend EVGL 11.2.1 (1)(c) to allow some other method for recording the confirmation of proper corporate registration. Since Rich knows the facts if this case, I’ll leave it to him to come up with any amending language.<span style='font-size:12.0pt;font-family:"Times New Roman",serif'><o:p></o:p></span></p></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></body></html>