<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
p.imprintuniqueid, li.imprintuniqueid, div.imprintuniqueid
{mso-style-name:imprintuniqueid;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Nick Pope has asked me to forward a new ETSI document for the Forum’s review and comment – see below.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Our next teleconference is tomorrow, so there is not enough time to review and comment by then. I will put on the Agenda for the May 17 call.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Pope, Nick [mailto:nick.pope@thales-esecurity.com]
<br>
<b>Sent:</b> Wednesday, May 2, 2018 1:13 AM<br>
<b>To:</b> Kirk Hall <Kirk.Hall@entrustdatacard.com><br>
<b>Cc:</b> arno.fiedler@nimbus-berlin.com<br>
<b>Subject:</b> [EXTERNAL]ETSI EN 319 403 supplement on audit of TSPs that issue PTC certs<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-GB">Kirk,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">On behalf of the ETSI technical committee for Electronic Signatures and Infrastructures I would like to submit for review and comment by CAB Forum members a supplement to ETSI EN 319 403: Draft TS 119 403-2. This specifies
additional requirements for “conformity assessment bodies auditing TSPs that issue Publicly-Trusted Certificates” aimed at the web browser and CA community represented by the CA Browser forum. In particular, this specifies requirements for “audit attestations”
aligned with requirements of the web browser community and also incorporates CAB Forum requirements for annual audits and continuity of audits.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">This document is available for public access at:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><a href="https://docbox.etsi.org/ESI/Open/Latest_Drafts/ESI-0019403-2v005-public.pdf">https://docbox.etsi.org/ESI/Open/Latest_Drafts/ESI-0019403-2v005-public.pdf</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">ETSI would welcome feedback from CAB Forum members on this document and whether it meets the aims of the CAB Forum in supporting audit against baseline and extended validation guidelines.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Nick Pope<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Vice chair ETSI TC ESI<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p> </o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="EN-GB" style="font-size:12.0pt;font-family:"Times New Roman",serif">
<hr size="3" width="100%" noshade="" style="color:#5DBFD4" align="center">
</span></div>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:12.0pt;font-family:"Times New Roman",serif"> <a href="http://www.thalesesecurity.com"><span style="text-decoration:none"><img border="0" width="140" height="34" id="_x0000_i1026" src="cid:imaged20829.PNG@53a6c7f4.499cfdf0"></span></a><o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0" style="width:272.25pt;border-collapse:collapse">
<tbody>
<tr style="height:130.5pt">
<td width="60%" nowrap="" style="width:60.0%;padding:3.75pt 3.75pt 3.75pt 3.75pt;height:130.5pt">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">Nick</span></b><span style="font-size:12.0pt;font-family:"Times New Roman",serif"> </span><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D">Pope</span></b><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#7D7D7D">Principal Consultant, Advanced Solutions Group</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#7D7D7D">Tel: +44 1844 203585<br>
Mob: +44 7880 787940</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><a href="https://www.twitter.com/thalesesecurity"><span style="text-decoration:none"><img border="0" width="16" height="16" id="_x0000_i1027" src="cid:image218cb4.PNG@19dcf1ec.449500ba"></span></a></span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#7D7D7D">@thalesesecurity</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
</span><b><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#7F7F7F">Thales eSecurity</span></b><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
</span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#7D7D7D">Meadow View House, Long Crendon<br>
Aylesbury HP18 9EQ</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
</span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:#7D7D7D">United Kingdom</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<a href="https://gdpr.thalesesecurity.com/"><span style="text-decoration:none"><img border="0" width="450" height="88" id="_x0000_i1028" src="cid:image223493.PNG@d81e15ab.468225ed"></span></a><o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr style="height:28.5pt">
<td style="border-top:dotted #BFBFBF 1.0pt;border-left:none;border-bottom:dotted #BFBFBF 1.0pt;border-right:none;padding:0in 0in 0in 0in;height:28.5pt">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><a href="http://www.thalesesecurity.com" title="">www.thalesesecurity.com</a></span><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p> </o:p></span></p>
</div>
</body>
</html>