6. The Order authorizes a certification service provider that enters into an agreement with the Order determining the administrative procedures necessary for the application of this Regulation and that meets the following minimal conditions:(1) it has a certification policy that complies with documents RFC 3647 and RFC 3280 developed by the Internet Engineering Task Force and that includes a procedure for identity verification;
(2) it issues keys and certificates by means of a public-key infrastructure;
(3) it has a certificate directory that complies with the International Telecommunication Union (ITU) Recommendation X.500;
(4) it issues certificates that comply with the ITU Recommendation X.509;
(5) it issues keys that consist of a unique and indissociable pair of keys, one public and the other private, which allow the signing of technology-based documents and the identification of the signatory;
(6) it issues certificates that include, in particular, the following elements:(a) the distinguishing name of the notary combined with a unique code;
(b) a mention to the effect that he or she is a notary;
(7) it enters the certificates into a directory held on a medium based on information technology and keeps it up-to-date. The directory must include, in particular, the serial numbers of the certificates that are valid, suspended, cancelled, or archived.