6. The Order authorizes a certification service provider that enters into an agreement with the Order determining the administrative procedures necessary for the application of this Regulation and that meets the following minimal conditions:1° it has a certification policy that complies with documents RFC 3647 and RFC 3280 developed by the Internet Engineering Task Force and that includes a procedure for identity verification;
2° it issues keys and certificates by means of a public-key infrastructure;
3° it has a certificate directory that complies with the International Telecommunication Union (ITU) Recommendation X.500;
4° it issues certificates that comply with the ITU Recommendation X.509;
5° it issues keys that consist of a unique and indissociable pair of keys, one public and the other private, which allow the signing of technology-based documents and the identification of the signatory;
6° it issues certificates that include, in particular, the following elements:a) the distinguishing name of the notary combined with a unique code;
b) a mention to the effect that he or she is a notary;
7° it enters the certificates into a directory held on a medium based on information technology and keeps it up-to-date. The directory must include, in particular, the serial numbers of the certificates that are valid, suspended, cancelled, or archived.