Skip to content

Instantly share code, notes, and snippets.

@gerv
Created November 15, 2016 11:35
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save gerv/fc311785c49c7fdfdfba78d6d5ad4aa9 to your computer and use it in GitHub Desktop.
Save gerv/fc311785c49c7fdfdfba78d6d5ad4aa9 to your computer and use it in GitHub Desktop.
GDCA CPS diff, 4.1 to 4.3A
--- original-english-cps-4.1.txt 2016-11-15 10:52:57.541218549 +0000
+++ first-updated-cps-4.3.txt 2016-11-15 10:53:25.121217361 +0000
@@ -4,12 +4,12 @@
-Guangdong Certificate Authority CO.,
-LTD
+Global Digital Cybersecurity Authority
+CO., LTD.
Certification Practice Statement (CPS)
-Version: V4.1
+Version: V4.3
-Effective Date: March 10, 2015
+Effective Date: July 1, 2016
@@ -2084,7 +2083,8 @@
3.2.5. Domain Recognition and Identification
-For domain verification, GDCA needs to check the written materials which can be used to prove
+If the certificate name is a domain name (or IP address), except for reviewing submitted written
+materials, GDCA should review identification documents of this domain name (or IP address) provided
@@ -2092,19 +2092,9 @@
-the ownership of corresponding domain provided by applicant. Meanwhile, GDCA should ensure the
-ownership of domain from corresponding registrant or other authoritative third-party databases.
-During the verification, GDCA needs to perform the following procedures:
-1. GDCA should confirm that the domain's owner is certificate applicant based on the information
-queried from corresponding domain registrant or authoritative third-party database and provided
-by applicant.
-2. GDCA should confirm that the significant information (such as document information of applicant)
-in application materials are consistent with the reply of domain's owner by sending email or
-making phone call based on the contact information (such as email, registrar, administrator's
-email published at this domain's website, etc.)queried from corresponding domain registrant or
-authoritative third-party database.
-If necessary, GDCA also need to take other review measures to confirm the ownership of the
-domain name. Applicant can't refuse to the request for providing appropriate assistance.
+by applicant or query corresponding RA of domain name (RA of IP) or third-party. GDCA also need to
+take other review measures to confirm the ownership of the domain name (or IP address). Applicant
+can’t refuse to the request for providing appropriate assistance.
3.2.6. Non-Verified Subscriber Information
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment