Change log

version 1.0

drafted February 2001

version 1.5

changed may 15th, 2001

version 2.0 alpha

drafted September 23-24, 2001.

version 2.1

updated November 5, 2001. The responsible for attesting to the validity of WTCW-based organisations is now the NIKHEF directorate.

version 2.2

updated November 4, 2004.

• Telex contact removed
• clarified slightly the constituency
• added non-discriminatory clause for the constituency
• Made the list of RAs dynamic. The RAs are published in the on-line repository
• opened possibility to delegate operation, as long as responsibility remains with the CA managers
• RAs must now be real individuals (no groups)
• RAs must nu also comply with current best practices (not only the literal CP/CPS)
• removed references to DataGrid, and added those to EUGridPMA in audit section
• allowed alternative naming convention of hosts
• clarified uniqueness (linked to only one entity)
• removed option for voice authentication
• added special authentication based on existing records
• now really set max lifetime to 1 year for end-entity certs
• reduced certificate issuance grace period
• added description of paper-based trail
• tightened revocation grace period
• minor changes on archiving and NTP synchronisation to remove anomalies
• added critical keyUsage
• added CA subject name