Ballot SC023v3: Precertificates

Ballot overview

• Ballot SC023v3, Precertificates, proposed changes to the Baseline Requirements for publicly trusted certificates.
• The ballot aimed to clarify requirements for precertificates in BR section 4.9.10.
• The stated purpose was to resolve an issue where BR section 4.9.10 combined with BR section 7.1.2.5 prevented a CA from responding good for a precertificate.
• The ballot says this was a problem because a corresponding certificate may not have been issued, and some root store policies treat a precertificate as a presumption that a corresponding certificate has been issued and that a valid OCSP response is required.
• The ballot intended to clarify that a CA may provide revocation information for the serial number contained in a precertificate.

Motion and changes

• The motion said the ballot modifies the Baseline Requirements based on Version 1.6.6, or Version 1.6.6 as modified by ballot SC24.
• It would add a reference to section 1.6.3 of the Baseline Requirements.
• It would replace section 4.9.10 of the Baseline Requirements in its entirety.
• The ballot states it proposes a Final Maintenance Guideline.

Voting and approval

• The voting period ended and the ballot passed.
• Voting by Certificate Issuers: 15 yes votes, 0 no votes, 0 abstain.
• Voting by Certificate Consumers: 4 yes votes, 0 no votes, 0 abstain.
• The ballot states the bylaw approval requirements were met for both Certificate Issuers and Certificate Consumers.
• The ballot states quorum was met.
• Votes received from Actalis, Trustcor, and Izenpe after the voting period had ended were not counted.

Timing

• Discussion period: 3-October 2019 18:00 UTC to 07-November 2019 03:00 UTC.
• Vote for approval period: 07-November 2019 03:00 UTC to 14-November 2019 03:00 UTC.