What are the critical points that need to be considered when developing a Web Certificates Policy and a Web Certificates Standard? Would anyonw have a sample Policy and Standard relating to this?