Yes, Certificate Authorities (CAs) go through a Webtrust audit annually. Any of the Webtrust certified auditors, including the Big 4, are able to perform the audit. Once the audit is completed, a CA can apply to become trusted in all of the browsers. This is why CAs must adhere to minimum basic requirements outlined by the cabforum and it's also the reason why CAs are trusted globally.
↧