The CMPWG (Aug-18-2011) upon reviewing clause 7.35.4 were confused by the following sentence:

<i>"This token shall always be accompanied by a signature if required by the SecurityPolicy."</i>

The above sentence was confusing because it implied that an additional parameter was needed somewhere.

We determined that the UA Specifications really doesn't need to describe this behavior since UA simply uses the X509 standard, UA doesn't define it. Therefore, we feel that the statement can be removed. Further, validation behavior described should be reduced to simply "valid" or "validated" when referring to a certificate since all of the validation rules are defined in the applicable RFC document(s).