520.3.10. The certificate referred to in section 520.3.3 must be issued(1) if it establishes the identity of a person, following verification in person by an identity verification agent to whom at least two documents emanating from a recognized government authority are presented, confirming the person’s identity, one of which includes the person’s photograph;
(2) if it establishes the place where a person practises a profession or works, following verification by the certification service provider;
(3) if it establishes an access profile, following verification by the certification service provider of the access profile assigned to a person and arising(a) directly from this Act; or
(b) from the exercise of the powers conferred on the access profile manager; and
(4) if it establishes an object identifier or the use or location of the object, following verification(a) in person of the identity of the person authorized to apply for a certificate in the name of the object’s owner or custodian, by an identity verification agent to whom at least two documents emanating from a recognized government authority are presented, confirming the person’s identity, one of which includes the person’s photograph; or
(b) by a certification service provideri. of the applicant’s power to represent the owner or custodian of the object;
ii. of the existence and identifier of the object;
iii. of the authorized use of the object, if applicable;
iv. of the object’s location, if applicable; and
v. of the existence and identity or identification of the object’s owner or custodian.
A verification under this section may also be carried out online using a certificate issued in accordance with sections 520.3.3 to 520.3.13 that establishes the subject of the verification.
In the policy statement issued under section 52 of the Act to establish a legal framework for information technology (chapter C-1.1), a certification service provider may specify other requirements in addition to those set out in this Act.