SC-015 passed

Ballot SC015: Remove Validation Method Number 9

Server Certificate Working Group

Key dates

Effective date: 05 Feb 2019 7 years ago
Voting opened: 29 Jan 2019 7 years ago
Voting closed: 05 Feb 2019 7 years ago
Discussion opened: 22 Jan 2019 7 years ago
Discussion closed: 29 Jan 2019 7 years ago

Resources

⎇ GitHub diff https://github.com/dougbeattie/documents/compare/master...dougbeattie:SC15---Remove-Method-9 https://github.com/dougbeattie/documents/compare/master…dougbeattie:SC15-Remove-Method-9

AI Summary

Generated 2026-06-23 21:24 UTC

Ballot overview

Ballot SC015, Remove Validation Method Number 9, was a Server Certificate Working Group ballot.
The ballot changed Baseline Requirements section 3.2.2.4.9, Test Certificate.
The motion replaced the prior Test Certificate validation text with a retirement rule stating the method has been retired and MUST NOT be used.
It also states that prior validations using this method and validation data gathered according to this method SHALL NOT be used to issue certificates.

Purpose

The ballot says Method 9, Test Certificate, is insecure when web hosting platforms use a single IP address for more than one Domain Name.
The ballot therefore says this method must not be used.

Approval and voting

The ballot page states the voting period ended and the ballot has Passed.
Certificate Issuers: 23 yes votes, 0 no votes, 0 abstentions.
Certificate Consumers: 5 yes votes, 0 no votes, 0 abstentions.
The page states the bylaw approval requirements were met for both Certificate Issuers and Certificate Consumers.
The page also states quorum was met.

Procedure dates

Discussion period: 2019-01-22 08:15 Eastern to 2019-01-29 08:15 Eastern.
Vote for approval: 2019-01-29 15:00 Eastern to 2019-02-05 15:00 Eastern.
The linked artifact shows the redline change to docs/BR.md for section 3.2.2.4.9.

Compliance impact

CAs must not use Validation Method Number 9 / Test Certificate.
Prior validations and validation data gathered under this method must not be used to issue certificates.

Model: gpt-5.4-mini Confidence: 0.98 Result: passed

Effective date: 2019-02-05
Voting opened: 2019-01-29
Voting closed: 2019-02-05
Discussion opened: 2019-01-22
Discussion closed: 2019-01-29

AI-generated from the CABF ballot page. The official CABF article remains the authoritative source.

Vote result

0 Yes

0 No

0 Abstain

Proposers

Doug Beattie of GlobalSign and endorsed by Bruce Morton of Entrust Datacard and Ryan Sleevi of Google.

Excerpt

SearchHome » All CA/Browser Forum Posts » Ballot SC015: Remove Validation Method Number 9Ballot SC015: Remove Validation Method Number 9The voting period for Ballot SC15 has ended and the Ballot has Passed. Here are the results: Voting by Certificate Issuers – 23 votes total including abstentions

View on cabforum.org → Last fetched 15 hours ago