Circular 23/2010 — Modifies Circular-Telefax 6/2005

CIRCULAR 23/2010 Mexico, D.F., August 2, 2010 TO CREDIT INSTITUTIONS: SUBJECT: MODIFICATION TO CIRCULAR-TELEFAX 6/2005 RELATING TO THE EXTENDED SECURITY INFRASTRUCTURE (ESI) The Bank of Mexico, based on Articles 28 of the Political Constitution of the United Mexican States, sixth and seventh paragraphs; 2°, 3° fraction I and 24 of the Bank of Mexico Law; 106 of the Commercial Code; Fourth Transitory of the Decree by which various provisions of the Commercial Code are reformed and added regarding Electronic Signature, published in the Official Gazette of the Federation on August 29, 2003; 8° paragraphs third and sixth, 10, 17 fraction I and 20 fraction IV of the Internal Regulations of the Bank of Mexico, which grant it the authority to participate in the issuance of provisions through the Directorate of Central Bank Regulations and the Directorate of Operations and Payments Systems, as well as the Sole Clause of the Agreement on the Affiliation of the Administrative Units of the Bank of Mexico, fractions I and IV, with the objective of continuing to promote the proper functioning of payment systems and considering that current technology allows extending the validity of digital certificates while guaranteeing their security and reliability, which represents a benefit for their holders, has resolved to modify numeral 3.1 of Annex 4 of Circular-Telefax 6/2005 dated March 15, 2005, modified by Circular-Telefax 6/2005 Bis of December 23, 2005, to read as follows:

ANNEX 4 CHARACTERISTICS OF DIGITAL CERTIFICATES 3. Digital Certificates shall become void in the following cases: “3.1 Upon expiration of the validity period of the Digital Certificate itself, which may not exceed four years counted from the date of its issuance.”

2 TRANSITORY PROVISIONS FIRST. This Circular enters into force on August 5, 2010. SECOND. Persons authorized by the Bank of Mexico to act as Certification Agencies (CA) and Registration Agencies (RA) in the ESI must request the issuance of new digital certificates that allow them to perform such functions, with a validity of eight years. For the above purpose, the holders of the aforementioned digital certificates of CA and RA must schedule an appointment to attend the offices of the Projects Management of the Directorate of Operations and Payments Systems of the Bank of Mexico –located at 5 de Mayo Avenue number 6, fifth floor, Centro Neighborhood, Cuauhtémoc Delegation, Postal Code 06059, Mexico, D.F.- in order to obtain the new digital certificates.