NAC720.450. Prerequisites to issuance of certificate to subscriber.

     1. A certification authority may issue a certificate to a subscriber only after the certification authority has:

     (a) Received a request for the issuance of a certificate signed by the prospective subscriber; and

     (b) Confirmed, which must include requiring a subscriber and the subscriber’s agent or agents to certify the accuracy of relevant information under penalty of perjury, that:

          (1) The prospective subscriber is the person to be identified in the requested certificate;

          (2) The prospective subscriber rightfully holds a private key which:

               (I) Is capable of creating a digital signature; and

               (II) Corresponds to the public key to be set forth in the requested certificate;

          (3) The public key to be set forth in the requested certificate can be used to verify a digital signature affixed by the private key held by the prospective subscriber;

          (4) The information to be included in the requested certificate is accurate;

          (5) The requested certificate provides sufficient information to locate or identify one or more repositories in which the certificate will be stored and, if the certificate is suspended or revoked, notice of the suspension or revocation will be published; and

          (6) If the prospective subscriber is acting through one or more agents, the prospective subscriber has:

               (I) Authorized the agent or agents to have custody of his or her private key, to request the issuance of a certificate setting forth the corresponding public key and to sign digitally on behalf of the prospective subscriber; and

               (II) Ensured that adequate safeguards exist to prevent the creation of a digital signature that exceeds any limitations on the authority of the agent or agents.

     2. A certification authority shall, when seeking to obtain any other information material to the issuance of a certificate, require the subscriber and the subscriber’s agent or agents to certify the accuracy of relevant information under penalty of perjury.

     3. The provisions of this section may not be waived, disclaimed or otherwise limited by agreement.

     (Added to NAC by Sec’y of State by R155-98, eff. 12-2-99)