Domain Control Validation-Only Trust Assurance with Secured Infrastructure

This is an Authentication Profile of the IGTF describing the minimum requirements on X.509 PKI authorities issuing certificates for systems and online services identified by their Internet Domain Name, where the domain control vetting is adequate to ensure unique, non-re-assigned certificate subjects, and generated by authorities using secured and trusted infrastructure. Such authorities are not required to collect more data than are necessary for fulfilling the uniqueness requirements, and credentials issued by authorities under this profile may not provide sufficient information to independently trace individual subscribers and should be used in conjunction with complementary identification and vetting processes.