VeriSign CAs and RAs within the VTN

The following table summarizes the functions of the subscriber certificate-issuing Certification Authorities operated by VeriSign within the VTN. This document also lists the entities responsible for the Registration Authority function for such Certification Authorities.

Type CA Name CA Description Registration Authorities VTN Root CAs VeriSign Class 1 Public Primary CA (PCA) VeriSign Class 2 PCA VeriSign Class 3 PCA VeriSign Class 4 PCA The first generation of VeriSign Root certification authorities which issue certificates to Subordinate CAs within the VTN. VeriSign, Inc. VTN Class 1 PCA – Generation 2 (G2) VeriSign Class 2 PCA – G2 VeriSign Class 3 PCA – G2 VeriSign Class 4 PCA – G2 The second generation of VeriSign Root certification authorities which issue certificates to Subordinate CAs within the VTN. VeriSign, Inc. VTN Class 1 PCA – Generation 3 (G3) VeriSign Class 2 PCA – G3 VeriSign Class 3 PCA – G3 VeriSign Class 4 PCA – G3 The third generation of VeriSign Root certification authorities which issue certificates to Subordinate CAs within the VTN. VeriSign, Inc. Class 3 Organizational CAs RSA Secure Server CA Issues Secure Server certificates; also a Root CA. VeriSign, Inc., Managed PKI for SSL Customers and VTN Affiliates VeriSign International Server CA – Class 3 Issues Global Server certificates. VeriSign, Inc., Managed PKI for SSL (Premium Edition) Customers and VTN Affiliates VeriSign Class 3 Open Financial Exchange CA - G2 Issues OFX certificates. VeriSign, Inc. VeriSign Class 3 Code Signing 2001 CA Issues code signing and object signing certificates for use with Netscape browsers, Microsoft Internet Explorer browsers, Microsoft Office, Sun Java Signing, Macromedia, and Marimba. VeriSign, Inc. VeriSign Class 3 WLAN Secure Server CA Issues wireless secure server certs supporting the PEAP protocol. VeriSign, Inc. VeriSign Class 3 Secure Intranet Server CA Sings certificates to be used on secure intranet servers. VeriSign, Inc. Class 2 Enterprise CAs VeriSign Class 2 OnSite Individual CA Issues certificates to the subscribers of Managed PKI Lite customers Managed PKI Customer Managed PKI Full Public Customer-Specific CAs Customer-specific CAs that chain to the VeriSign Class 2 PCA. Managed PKI Customer Class 2 Infrastructure/ Administrative CAs VeriSign Class 2 Personnel CA Superior CA to the VeriSign Class 2 Employee and Contractor CAs. VeriSign, Inc. VeriSign Class 2 Employee CA Issues certificates to VeriSign employees. VeriSign, Inc. VeriSign Class 2 Contractor CA Issues certificates to VeriSign contractors. VeriSign, Inc. Class 1 CAs VeriSign Class 1 CA Individual Subscriber-Personal Not Validated Issues Class 1 certificates to individuals. VeriSign, Inc.

Although VeriSign’s Authenticated Code Signing (ACS) products do not utilize CAs that chain up to VTN root CAs, they are included among the various types of infrastructure CAs covered in VeriSign’s Certification Practices Statement (CPS). There are two types of ACS CAs operated by VeriSign, as described in the table below.