Documenting

Documenting the Certificate Policy

[1] You can own and operate a Digi-CA™ system without ever putting in place any statutory documents or standards [2] compliance [2] and many organizations because their application is commercial and doesn’t need third part accreditation. ‘Best Practice’ means you should consider having a Certificate Policy and we would recommend the following:

3.13.1 Digi-ID™ [3] field configuration (see below)
3.13.2 Certificate Policy Certificate Policy document (see Appendix II)
3.13.3 Digi-CA™ referencing the Digi-Certificate Practice Statement [4]™ (optional)

• Field Configuration Control

Having specific fields added to your Digi-IDs™ is normally not required unless you are seeking accreditation or are issuing to millions of users and is a common practice when considering National IDs, e Passports [5], Health IDs, etc. At the deepest level, this may include Object ID [OID] fields and the need to register these OIDs with the Internet Assigned Numbers Authority [IANA]. Digi-CAST1™ will advise you on this should it be required and carry out this level of customization and registration where appropriate.



Status: Active

Expiry Date: 2007-02-14 00:00:00 GMT

Serial Number: 04A80417E8B3D35AE8B480FFAFCD3274

Invited on: 2006-02-02 17:40:17 GMT

Invited by: bob.smith@digi-sign.com [6]

Invitation Name: Mary Brown

Invitation Email: mary.brown@domain.com [7]

Requested on: 2006-02-02 18:51:09 GMT

Approved on: 2006-02-12 18:55:52 GMT

Approved by: mylissa.monton@hostname.com [8]

Activated on: 2006-02-13 19:00:33 GMT

Revoked on:

Common Name: Bob Smith

Email: bob.smith@digi-sign.com [6]

Organization: Services Group

Organizational Unit: 14029

Locality/City: Pompano Beach, FL

Country: US

Secret Question: Favorite pet's name?

Secret Answer: Johnny Cash