Abstract
The ability to authenticate the identity of an entity in an open and insecure environment such as the Internet plays an important role in reducing potential threats and Public key Infrastructure techniques assist in verifying the identity of entities participating in online transactions. A Certification Authority (CA) issues certificates to entities and vouches for the identity embodied in them. These certificates inherit their trustworthiness from the fact that their issuer is a known (trusted) CA. We have developed criteria for authenticating an entity's identity when there is no trusted CA (untrusted domain) to vouch for the trust embodied in a certificate. This paper describes conformance testing of the criteria we developed; the ultimate objective of this being to show their efficiency and robustness.