Organisation Assurance Policy (OAP => COD11) rules this area. CPS3.2.3 refers process to OAP. OAP directs specific environments ("countries") by Subsidiary Policy. These are not universally written nor approved as yet, but where not, no assurance is accepted. CPS3.1.1 describes x.509 naming attributes CPS3.1.6 trademarks