Ballot 49 – New Certificate for Existing Subscriber

Ballot overview

• Ballot 49, New Certificate for Existing Subscriber, is marked as Passed Unanimously.
• The motion was made by Rich Smith and endorsed by Ben Wilson and Bruce Morton.
• The ballot applies to EV certificate issuance and reuse of existing documentation for existing subscribers.

Main changes

• Renames several EV-related sections, including:
  • Section 8.3 to Technical Requirements
  • Section 8.3.1 to Maximum Validity Period For EV Certificate
  • Section 10.13 to Requirements for Re-use of Existing Documentation
• Adds and revises requirements for re-issuance and validation when an applicant already has a current valid EV certificate.
• Allows a CA to rely on previously verified information for a replacement certificate when the replacement certificate expiration date matches the current EV certificate and the subject is the same.
• Requires the CA to perform all authentication and verification tasks needed to ensure an EV certificate request is properly authorized and that the certificate information remains accurate and valid.
• Sets maximum ages for validated data used to support EV certificate issuance, generally thirteen months for the listed data types.
• Allows multiple EV certificates with the same subject based on a single EV certificate request, subject to the stated aging and updating requirements.
• Requires each EV certificate to be supported by a valid current EV certificate request and either a signed Subscriber Agreement or acknowledged Terms of Use.
• Requires outdated information to be re-verified.
• Deletes Section 13.3 and renumbers later sections accordingly.

Timing

• The ballot review period comes into effect at 2100 UTC on 23 July 2010 and closes at 2100 UTC on 30 July 2010.
• Unless withdrawn during review, the voting period starts immediately afterward and closes at 2100 UTC on 6 Aug 2010.
• The motion states EFFECTIVE IMMEDIATELY.

Compliance impact

• The ballot requires immediate implementation of the renaming, re-use, validation, and re-issuance rules described in the motion.
• The thirteen-month age limits apply to the listed validated data used for EV certificate issuance.
• The replacement-certificate rule applies when the applicant already has a current valid EV certificate and the replacement certificate matches the current certificate’s expiration date and subject.