Specifies the assurance evaluation criteria for Intermediate Certification Authorities (ICAs), Organisation Certification Authorities (OCAs) and Organisation Registration Authorities (ORAs) intending to operate in an open Public Key Authentication Framework.