Jay,

To recap our discussion, our annual WebTrust for CAs reports for the VeriSign, Thawte and GeoTrust brands (most recently covering the period ending November 30, 2007) cover the effectiveness of CA controls including the CA key generation process based on the WebTrust for CAs criteria.  Each audit cycle, we test various CA key generation ceremonies and identify specific production CAs in our reports.

Mark

Mark A. Lundin
Partner
KPMG LLP
Phone: 415-963-5493
Fax: 415-358-4734

***********************************************************************
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else is
unauthorized. If you are not the intended recipient, any disclosure, copying,
distribution or any action taken or omitted to be taken in reliance on it, is
prohibited and may be unlawful. When addressed to our clients any opinions or
advice contained in this email are subject to the terms and conditions
expressed in the governing KPMG client engagement letter.
***********************************************************************