Problems in Issuance What name and identity do you verify? Example: Microsoft Security Bulletin MS01-017 In January 2001, VeriSign issued two Class 3 code-signing digital certificates to an unknown individual, bearing the common name "Microsoft Corporation" Who do you want to 0wn today?