EV Validation Exam 2

1. Are EV certificates allowed to be wildcards?

Yes

No

The EV Guidelines do not allow wildcards in EV certificates.

Explanation

The EV Guidelines do not allow wildcards in EV certificates.

2. Are Subject Alternative Names allowed in an EV Certificate?

Yes

No

They are automatically included as the Plus feature. A EV UC certificate is currently not possible in our current system but it is allowed by the EV guidelines.

Explanation

They are automatically included as the Plus feature. A EV UC certificate is currently not possible in our current system but it is allowed by the EV guidelines.

3. When a customer places an order for a certificate, the private key of the key pair is contained in the Certificate Signing Request.

True

False

The private key stays on the server. The public key is included in the CSR.

Explanation

The private key stays on the server. The public key is included in the CSR.

4. According to the EV Certificate guidelines, which of the following types of organizations may not obtain an EV SSL certificate?

Private Organizations

General Partnerships and Unincorporated Associations

Sole Proprietorships

Government Entities

Individuals (Natural Persons)

EV SSL certificates are specifically designed for organizations and businesses, not for individuals. EV certificates require extensive verification of the organization's identity and legal status, which is not applicable to individuals. Therefore, individuals (natural persons) may not obtain an EV SSL certificate.

Explanation

EV SSL certificates are specifically designed for organizations and businesses, not for individuals. EV certificates require extensive verification of the organization's identity and legal status, which is not applicable to individuals. Therefore, individuals (natural persons) may not obtain an EV SSL certificate.

5. A special CSR is required in order to create an EV certificate.

True

False

A special CSR is not required in order to create an EV certificate. EV certificates, also known as Extended Validation certificates, require a specific validation process that involves verifying the legal identity and physical existence of the entity applying for the certificate. However, the process of creating a CSR (Certificate Signing Request) is the same for all types of certificates, including EV certificates. The CSR contains the public key and other information that is used to generate the certificate. Therefore, the statement that a special CSR is required for creating an EV certificate is false.

Explanation

A special CSR is not required in order to create an EV certificate. EV certificates, also known as Extended Validation certificates, require a specific validation process that involves verifying the legal identity and physical existence of the entity applying for the certificate. However, the process of creating a CSR (Certificate Signing Request) is the same for all types of certificates, including EV certificates. The CSR contains the public key and other information that is used to generate the certificate. Therefore, the statement that a special CSR is required for creating an EV certificate is false.

6. Which entity category does DigiCert, Inc. fall into?

Business Entity

Government Entity

Non-Commercial Entity

Private Organization

DigiCert, Inc. falls into the category of a private organization because it is a privately-owned company that provides digital certificate solutions for secure online transactions. Private organizations are typically owned by individuals or a group of individuals and operate for profit in the private sector.

Explanation

DigiCert, Inc. falls into the category of a private organization because it is a privately-owned company that provides digital certificate solutions for secure online transactions. Private organizations are typically owned by individuals or a group of individuals and operate for profit in the private sector.

7. The “Registration Number” field in the application may be left blank if the incorporating agency does not reference one.

True

False

"If the Jurisdiction of Incorporation or Registration does not provide a Registration Number, then the date of Incorporation or Registration SHALL be entered into this field in any one of the common date formats."

"In circumstances where this information is not available, the CA MUST enter appropriate language to indicate that the Subject is a Government Entity"

Explanation

"If the Jurisdiction of Incorporation or Registration does not provide a Registration Number, then the date of Incorporation or Registration SHALL be entered into this field in any one of the common date formats."

"In circumstances where this information is not available, the CA MUST enter appropriate language to indicate that the Subject is a Government Entity"

8. What is the minimum CSR key size that our system allows for EV certificates?

128

256

1024

2048

Both C and D

The EV guidelines will still allow 1024-bit keys on one-year certificate for a few more months but our order process requires 2048-bit.

Explanation

The EV guidelines will still allow 1024-bit keys on one-year certificate for a few more months but our order process requires 2048-bit.

9. The DCV can be used to verify the signature on a DAL.

True

False

The DCV (Data Communication Verification) is not used to verify the signature on a DAL (Data Access Layer). The DCV is a method used to verify the integrity and authenticity of data during transmission, while the DAL is a software component that provides access to a database. These two concepts are unrelated, so the statement is false.

Explanation

The DCV (Data Communication Verification) is not used to verify the signature on a DAL (Data Access Layer). The DCV is a method used to verify the integrity and authenticity of data during transmission, while the DAL is a software component that provides access to a database. These two concepts are unrelated, so the statement is false.

10. How are trade names displayed on the greenbar for an EV Certificate?

Parent Company DBA Trade Name

Trade name

Trade Name (Parent Company)

Trade names are not allowed to be displayed

When the certificate is generated it puts the trade name and parent company name in the Organization field as "Trade Name (Parent Company)"

Explanation

When the certificate is generated it puts the trade name and parent company name in the Organization field as "Trade Name (Parent Company)"

11. Which entity category does The United Nations fall into?

Business Entity

Government Entity

Non-Commercial Entity

Private Organization

The United Nations falls into the category of Non-Commercial Entity because it is an international organization that is not driven by profit-making activities. Its primary objective is to promote peace, security, and cooperation among nations, and it operates through various programs and agencies that address global issues such as poverty, human rights, and climate change. As a non-commercial entity, the United Nations relies on voluntary contributions from member states and donations to fund its operations and initiatives.

Explanation

The United Nations falls into the category of Non-Commercial Entity because it is an international organization that is not driven by profit-making activities. Its primary objective is to promote peace, security, and cooperation among nations, and it operates through various programs and agencies that address global issues such as poverty, human rights, and climate change. As a non-commercial entity, the United Nations relies on voluntary contributions from member states and donations to fund its operations and initiatives.

12. According to DigiCert standards, how long are EV Validation documents and confirmations valid (before re-validation is required)?

9 months

11 months

12 months

13 months

DigiCert standards > EV Guidelines (in this case).

Explanation

DigiCert standards > EV Guidelines (in this case).

13. Which of the following name extensions are we not allowed to issue an EV certificate for?

.int

.local

.no

Both A and B

.int domains can be used if the organization has actually registered the domain name and it is an International organization.

.local can not be used because the EV guidelines do not allow EV certificates to be issued to internal names.

Explanation

.int domains can be used if the organization has actually registered the domain name and it is an International organization.

.local can not be used because the EV guidelines do not allow EV certificates to be issued to internal names.

14. According to the EV standards, how long are EV Validation documents and confirmations valid (before re-validation is required)?

6 months

11 months

12 months

13 months

According to EV standards, EV Validation documents and confirmations are valid for a period of 13 months before re-validation is required.

Explanation

According to EV standards, EV Validation documents and confirmations are valid for a period of 13 months before re-validation is required.

15. Which of the following examples of the Incorporation Information is correct?

Country: SwitzerlandState:City:Incorporating Agency: Handelsregisteramt des Kantons BernRegistration Number 0115

Country: USAState: DelawareCity:Incorporating Agency: Department of State: Division of CorporationsRegistration Number DOC:20090418

Country: USAState: New YorkCity: Incorporating Agency: Department of State: Division of Corporations Registration Number DOC:20090418

Country: USAState: UtahCity: Salt Lake CityIncorporating Agency: Department of Commerce Division of CorporationsRegistration Number: 5299537-0142

The state and city should only be specified if the incorporating agency is specifically over that area (e.g. if a country keeps the records about all companies (Finland), you will only enter the country name. If a company is registered with a particular state (New York) in a country, the state should be entered. The city is rarely entered.)

You can only enter "DOC:20090418" as the registration number if no registration number is issued by the incorporating agency. Delaware does issue registration numbers so that can't be entered. New York does not issue registration numbers so that must be entered.

Explanation

The state and city should only be specified if the incorporating agency is specifically over that area (e.g. if a country keeps the records about all companies (Finland), you will only enter the country name. If a company is registered with a particular state (New York) in a country, the state should be entered. The city is rarely entered.)

You can only enter "DOC:20090418" as the registration number if no registration number is issued by the incorporating agency. Delaware does issue registration numbers so that can't be entered. New York does not issue registration numbers so that must be entered.

Ev Validation Exam 2