Skip to content
Draft
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
41 changes: 24 additions & 17 deletions docs/VMC-Requirements.adoc
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
= Minimum Security Requirements for Issuance of Mark Certificates
Mark Certificate Requirements Authors
1.7, January 22, 2025
1.8, January XX, 2026
:sectnums:
:sectnumlevels: 5
:toc:
Expand All @@ -27,13 +27,14 @@ Mark Certificates may be issued with respect to marks accredited by legislation

All Subscribers/Mark Asserting Entities, Consuming Entities, and Relying Parties are bound by the MC Terms attached as <<terms-of-use>> according to their terms. CAs who issue Mark Certificates SHALL include the MC Terms in their applicable Certification Practice Statement.

The four types of Mark Certificates included in these MC Requirements are as follows:
The five types of Mark Certificates included in these MC Requirements are as follows:

*Mark Certificates*

. Common Mark Certificates
.. Prior Use Mark Certificates
.. Modified Registered Trademark Certificates
.. New Mark Certificates
. Verified Mark Certificates
.. Registered Mark Certificates
.. Government Mark Certificates
Expand Down Expand Up @@ -66,6 +67,7 @@ This document SHALL be known as the Mark Certificate Requirements (or “MC Requ
|1.5 |07-15-2023 |07-15-2023
|1.6 |03-07-2024 |03-07-2024
|1.7 |01-22-2025 |01-22-2025
|1.8 |0X-XX-2026 |0X-XX-2026
|===

==== Mark Certificate OIDs
Expand Down Expand Up @@ -194,7 +196,7 @@ No stipulation.

*Certificate Profile:* A set of documents or files that defines requirements for Certificate content and Certificate extensions in accordance with <<_certificate_crl_and_ocsp_profiles>> of these Requirements, e.g., a Section in a CA's CPS or a certificate template file used by CA software.

*Certificate Requester*: A natural person who is either the Applicant, employed by the Applicant, an authorized agent who has express authority to represent the Applicant, or a third party (such as an ISP or hosting company) that completes and submits a MC Certificate Request on behalf of the Applicant.
*Certificate Requester*: A natural person who is either the Applicant, employed by the Applicant, an authorized agent who has express authority to represent the Applicant, or a third party (such as an ISP or hosting company) that completes and submits a Mark Certificate Request on behalf of the Applicant.

*Certificate Revocation List:* A regularly updated time-stamped list of revoked Certificates that is created and digitally signed by the CA that issued the Certificates.

Expand Down Expand Up @@ -318,9 +320,9 @@ possession, directly or indirectly, of the power to: (1) direct the management,

*Maximum Validity Period*: 1. The maximum time period for which the issued MC is valid. 2. The maximum period after validation by the CA that certain Applicant information may be relied upon in issuing a MC pursuant to these Requirements.

*MC Authority:* A source other than the Certificate Approver, through which verification occurs that the Certificate Approver is expressly authorized by the Applicant, as of the date of the MC Certificate Request, to take the Request actions described in these Requirements.
*MC Authority:* A source other than the Certificate Approver, through which verification occurs that the Certificate Approver is expressly authorized by the Applicant, as of the date of the Mark Certificate Request, to take the Request actions described in these Requirements.

*MC Certificate Request:* A request from an Applicant to the CA requesting that the CA issue an MC Certificate to the Applicant, which request is validly authorized by the Applicant and signed by the Certificate Approver.
*Mark Certificate Request:* A request from an Applicant to the CA requesting that the CA issue an MC Certificate to the Applicant, which request is validly authorized by the Applicant and signed by the Certificate Approver.

*MC Mark:* The Mark Representation and Word Mark, if any, contained in a MAE's Mark Certificate application.

Expand Down Expand Up @@ -374,10 +376,12 @@ possession, directly or indirectly, of the power to: (1) direct the management,

*Registered Agent:* An individual or entity that is: (i) authorized by the Applicant to receive service of process and business communications on behalf of the Applicant; and (ii) listed in the official records of the Applicant's Jurisdiction of Incorporation as acting in the role specified in (i) above.

*Registered Office:* The official address of a company, as recorded with the Incorporating Agency, to which official documents are sent and at which legal notices are received.
*Registered Mark:* A mark that has been registered by at least one Trademark Office.

*Registered Mark Certificate:* One type of Verified Mark Certificate.

*Registered Office:* The official address of a company, as recorded with the Incorporating Agency, to which official documents are sent and at which legal notices are received.

*Registration Authority (RA):* Any Legal Entity that is responsible for identification and authentication of subjects of Certificates, but is not a CA, and hence does not sign or issue Certificates. An RA may assist in the certificate application process or revocation process or both. When “RA” is used as an adjective to describe a role or function, it does not necessarily imply a separate body, but can be part of the CA as stipulated in <<_registration_authorities>>.

*Registration Agency*: A Governmental Agency that registers business information in connection with an entity's business formation or authorization to conduct business under a license, charter or other certification. A Registration Agency MAY include, but is not limited to (i) a State Department of Corporations or a Secretary of State; (ii) a licensing agency, such as a State Department of Insurance; or (iii) a chartering agency, such as a state office or department of financial regulation, banking or finance, or a federal agency such as the Office of the Comptroller of the Currency or Office of Thrift Supervision.
Expand Down Expand Up @@ -1629,6 +1633,13 @@ _Logo_
[.big]#N# amed
[.big]#C# ompany
|===
===== New

====== Verification of New Mark
The CA will perform the verification steps under <<_verification_of_mark_with_trademark_office>> and <<_verification_of_registered_mark_ownership_or_license>> for a Registered Mark submitted by the Applicant. Additionally, the Applicant will provide a Mark Representation that the Applicant wishes to include in the Mark Certificate.

The CA SHALL verify that the Registered Mark was registered by the Trademark Office at least three years prior to the date of the submission of the Mark Certificate Request for the Mark Certificate.

==== Mark Verification in Verified Mark Certificates

In addition to the identity and domain verification required by <<_initial_identity_validation>>, CAs issuing Verified Mark Certificates SHALL perform verification of the submitted Mark as follows:
Expand Down Expand Up @@ -2862,19 +2873,19 @@ For Business Entities, the Registration Number that was received by the Business

. *Certificate field:* subject:trademarkCountryOrRegionName (OID: 1.3.6.1.4.1.53087.1.3)
+
*Required* if the subject:markType field contains one of the following values: “Registered Mark” or “Modified Registered Mark”; *Prohibited* otherwise
*Required* if the subject:markType field contains one of the following values: “Registered Mark”, “Modified Registered Mark”, or "New Mark"; *Prohibited* otherwise
+
*Contents:* If the subject:markType field contains “Registered Mark” or “Modified Registered Mark”, then this field MUST containy the country or region of the Trademark Office that registered the Registered Mark as an WIPO ST.3 two letter country and intergovernmental/regional agency code (see list at http://www.wipo.int/export/sites/www/standards/en/pdf/03-03-01.pdf).
*Contents:* This field MUST contain the country or region of the Trademark Office that registered the Registered Mark as an WIPO ST.3 two letter country and intergovernmental/regional agency code (see list at http://www.wipo.int/export/sites/www/standards/en/pdf/03-03-01.pdf).

. *Certificate field:* subject:trademarkOfficeName (OID: 1.3.6.1.4.1.53087.1.2)
+
*Required* if the subject:markType field contains one of the following values: “Registered Mark” or “Modified Registered Mark” and the applicable country/region has more than one national/regional intellectual property agency where trademarks can be registered; *Optional* if the subject:markType otherwise contains one of the following values: “Registered Mark” or “Modified Registered Mark”; *Prohibited* if the subject:markType does not contain one of the following values: “Registered Mark” or “Modified Registered Mark”
*Required* if the subject:markType field contains one of the following values: “Registered Mark”, “Modified Registered Mark”, or "New Mark" and the applicable country/region has more than one national/regional intellectual property agency where trademarks can be registered; *Optional* if the subject:markType otherwise contains one of the following values: “Registered Mark”, “Modified Registered Mark”, or "New Mark"; *Prohibited* if the subject:markType does not contain one of the following values: “Registered Mark”, “Modified Registered Mark”, or "New Mark"
+
*Contents:* This string value identifies the Trademark Office by inserting the Trademark Office name listed in the “Office” column in the WIPO directory of country and regional intellectual property agencies at https://www.wipo.int/directory/en/urls.jsp for the Trademark Office that registered the Registered Mark included in the Verified Mark Certificate or is processing the application of the Mark included in the Mark Certificate.
*Contents:* This string value identifies the Trademark Office by inserting the Trademark Office name listed in the “Office” column in the WIPO directory of country and regional intellectual property agencies at https://www.wipo.int/directory/en/urls.jsp for the Trademark Office that registered the Registered Mark that was submitted by the Applicant.

. *Certificate field:* subject:trademarkIdentifier (OID: 1.3.6.1.4.1.53087.1.4)
+
*Required* if the subject:markType field contains one of the following values: “Registered Mark” or “Modified Registered Mark”; *Prohibited* otherwise
*Required* if the subject:markType field contains one of the following values: “Registered Mark”, “Modified Registered Mark”, or "New Mark"; *Prohibited* otherwise
+
*Contents:* This string value contains the identifier assigned by the Trademark Office to identify the Registered Mark or Registered Mark application.

Expand Down Expand Up @@ -2940,6 +2951,7 @@ The CA SHALL:
|<<_government_mark_verification>> |Government Mark
|<<_proof_of_prior_use>> |Prior Use Mark
|<<_modification_of_registered_trademark>> |Modified Registered Mark
|<<_new>> |New Mark
|===

. *Certificate fields:*
Expand Down Expand Up @@ -2984,12 +2996,7 @@ In addition, the CA MAY include brief explanatory text to assist Relying Parties

. *Certificate field:* subject:priorUseMarkSourceURL (OID: 1.3.6.1.4.1.53087.5.1)
+
If the subject:markType field contains “Prior Use Mark”:
+
* *Optional* if the Common Mark Certificate is issued before April 15, 2025
* *Required* if the Common Mark Certificate is issued on or after April 15, 2025
+
If the subject:markType field does not contain "Prior Use Mark”, then this field is *Prohibited*.
If the subject:markType field contains “Prior Use Mark”, then this field is *Required*. Otherwise, it is *Prohibited*.
+
*Contents:* This field MUST contain the URL where the Mark Representation included in the Mark Certificate was located by the CA during the verification process.

Expand Down
Loading