1.
How are trade names displayed on the greenbar for an EV Certificate?
Correct Answer
C. Trade Name (Parent Company)
Explanation
When the certificate is generated it puts the trade name and parent company name in the Organization field as "Trade Name (Parent Company)"
2.
What
information should be included when noting how the confirming person was verified for
a renewal order?
3.
Are
Subject Alternative Names allowed in an EV Certificate?
Correct Answer
A. Yes
Explanation
They are automatically included as the Plus feature. A EV UC certificate is currently not possible in our current system but it is allowed by the EV guidelines.
4.
Are EV certificates allowed to be wildcards?
Correct Answer
B. No
Explanation
The EV Guidelines do not allow wildcards in EV certificates.
5.
Which
of the following name extensions are we not allowed to issue an EV certificate
for?
Correct Answer
B. .local
Explanation
.int domains can be used if the organization has actually registered the domain name and it is an International organization.
.local can not be used because the EV guidelines do not allow EV certificates to be issued to internal names.
6.
Which
entity category does DigiCert, Inc. fall into?
Correct Answer
D. Private Organization
Explanation
DigiCert, Inc. falls into the category of a private organization because it is a privately-owned company that provides digital certificate solutions for secure online transactions. Private organizations are typically owned by individuals or a group of individuals and operate for profit in the private sector.
7.
Which
entity category does The United Nations fall into?
Correct Answer
C. Non-Commercial Entity
Explanation
The United Nations falls into the category of Non-Commercial Entity because it is an international organization that is not driven by profit-making activities. Its primary objective is to promote peace, security, and cooperation among nations, and it operates through various programs and agencies that address global issues such as poverty, human rights, and climate change. As a non-commercial entity, the United Nations relies on voluntary contributions from member states and donations to fund its operations and initiatives.
8.
According
to the EV Certificate guidelines, which of the following types of organizations
may not obtain an EV SSL certificate?
Correct Answer
E. Individuals (Natural Persons)
Explanation
EV SSL certificates are specifically designed for organizations and businesses, not for individuals. EV certificates require extensive verification of the organization's identity and legal status, which is not applicable to individuals. Therefore, individuals (natural persons) may not obtain an EV SSL certificate.
9.
The “Registration
Number” field in the application may be left blank if the incorporating agency does not reference one.
Correct Answer
B. False
Explanation
"If the Jurisdiction of Incorporation or Registration does not provide a Registration Number, then the date of Incorporation or Registration SHALL be entered into this field in any one of the common date formats."
"In circumstances where this information is not available, the CA MUST enter appropriate language to indicate that the Subject is a Government Entity"
10.
Name all of the documents that can be reused on an
EV Renewal order.
11.
According to the EV standards, how long are EV
Validation documents and confirmations valid (before re-validation is required)?
Correct Answer
D. 13 months
Explanation
According to EV standards, EV Validation documents and confirmations are valid for a period of 13 months before re-validation is required.
12.
According to DigiCert standards, how long are EV
Validation documents and confirmations valid (before re-validation is required)?
Correct Answer
A. 9 months
Explanation
DigiCert standards > EV Guidelines (in this case).
13.
How
can an opinion letter fulfill the operational existence requirement?
14.
What is the minimum CSR key size that our system
allows for EV certificates?
Correct Answer
D. 2048
Explanation
The EV guidelines will still allow 1024-bit keys on one-year certificate for a few more months but our order process requires 2048-bit.
15.
What
sources can be used to obtain physical address verification?
16.
Which of the following examples of the
Incorporation Information is correct?
Correct Answer
C. Country: USA
State: New York
City:
Incorporating Agency: Department of State: Division of
Corporations
Registration Number DOC:20090418
Explanation
The state and city should only be specified if the incorporating agency is specifically over that area (e.g. if a country keeps the records about all companies (Finland), you will only enter the country name. If a company is registered with a particular state (New York) in a country, the state should be entered. The city is rarely entered.)
You can only enter "DOC:20090418" as the registration number if no registration number is issued by the incorporating agency. Delaware does issue registration numbers so that can't be entered. New York does not issue registration numbers so that must be entered.
17.
What is Phishing?
18.
What
is Social Engineering?
19.
When a customer places an order for a
certificate, the private key of the key pair is contained in the Certificate
Signing Request.
Correct Answer
B. False
Explanation
The private key stays on the server. The public key is included in the CSR.
20.
A special CSR is required in order to create
an EV certificate.
Correct Answer
B. False
Explanation
A special CSR is not required in order to create an EV certificate. EV certificates, also known as Extended Validation certificates, require a specific validation process that involves verifying the legal identity and physical existence of the entity applying for the certificate. However, the process of creating a CSR (Certificate Signing Request) is the same for all types of certificates, including EV certificates. The CSR contains the public key and other information that is used to generate the certificate. Therefore, the statement that a special CSR is required for creating an EV certificate is false.
21.
You go to create a new Master Agreement, but the details for the contacts are left blank. What is the likely cause?
22.
The DCV can be used to verify the signature on a DAL.
Correct Answer
B. False
Explanation
The DCV (Data Communication Verification) is not used to verify the signature on a DAL (Data Access Layer). The DCV is a method used to verify the integrity and authenticity of data during transmission, while the DAL is a software component that provides access to a database. These two concepts are unrelated, so the statement is false.
23.
Please identify all of the issues you can regarding the master agreement below:(To view right click on the image and then center click on view image.)
24.
Have you been provided with or know where to obtain a current copy of
the EV guidelines? (A yes or no answer will suffice.)