- Reference number
- 085S/2026/27
- Issuing entity
- City of Cape Town
- Closing date
- 2026-11-19 10:00 SAST
SUPPLY, SUPPORT AND MAINTENANCE OF PUBLIC KEY INFRASTRUCTURE, SOFTWARE, SERVICES, DEVELOPMENT AND LICENSING
Bind an Identity to a Public Key • The certificate must correctly associate a validated subject (e.g., domain name, organization, individual) with a specific public key. • This binding must be established through a CA’s cryptographic signature using a private key that corresponds to a widely trusted root CA certificate. Comply With Public Trust Requirements / Baseline Requirements • Public CAs must follow the CA/Browser Forum Baseline Requirements (BRs), which dictate strict rules for identity verification, certificate content, key usage, algorithms, validity periods, revocation, and audit practices. • This ensures consistency, interoperability, and public trust across browsers, operating systems, and applications. Enable Secure, Interoperable Authentication • A Public CA certificate must support standard X.509-based authentication so that: o Browsers can validate HTTPS websites. o Devices and applications can verify server identity. o Clients can establish encrypted TLS sessions. Provide Trust through Transparency and Revocation • Must support mechanisms such as: o Certificate Transparency (CT) logging o CRLs (Certificate Revocation Lists) or OCSP (Online Certificate Status Protocol) These mechanisms allow relying parties to detect mis-issued or compromised certificates.