This document describes the intended governance controls for certificate programs operated under the Foundation. A program's certificate policy and service terms define the specific technical and validation requirements.

Request review and issuance

  • Review submissions against published eligibility and validation criteria.
  • Limit issuance to requests that meet the applicable program requirements.
  • Record the decision and the certificate profile or terms that apply.

Lifecycle management

  • Track validity and provide a defined renewal process.
  • Provide a route to report inaccurate information, suspected compromise, or misuse.
  • Assess suspension or revocation requests under the governing policy and document material status changes.

Transparency and review

Material policy changes should be published with enough context for affected parties to understand their impact. Questions and concerns may be directed through the Contact page.

No external assurance implied.

These guidelines are a public governance summary; they do not represent accreditation, a particular technical configuration, or guaranteed certificate acceptance.

Authority page: Certificate Authority.