There are three main things which must be verified before issuance of a code signing certificate:

1. The legal existence of the organization or individual named in the Organization field of the code signing certificate must be verified.

2. The email to which the code signing certificate is to be sent must be [email protected], where domain.com is owned by the organization named in the code signing certificate.

3. A callback must be made to a verified telephone number for the organization or individual named in the code signing certificate in order to verify that the person placing the order is an authorized representative of the organization.