Ballot SC042: 398-day Re-use Period

Ballot overview

• Ballot SC042, titled 398-day Re-use Period, was a Server Certificate Working Group ballot.
• The ballot passed.
• It was described as a ballot to adopt two Final Maintenance Guidelines.

What the ballot changed

• For the Baseline Requirements, it inserted a sentence in section 4.2.1 stating that, effective 2021-10-01, reused data, documents, or completed validation for Domain Names and IP Addresses must be obtained no more than 398 days before issuing the certificate.
• For the Extended Validation Guidelines, it replaced eight instances of thirteen months or thirteen-month in section 11.14.3 with 398 days and 398-day.
• The ballot did not change the 825-day reuse period in section 4.2.1 of the Baseline Requirements for Organizational Validation information.

Voting and approval

• Voting completed and the ballot passed.
• Certificate Issuers: 24 yes votes, 0 no votes, 0 abstentions.
• Certificate Consumers: 5 yes votes, 0 no votes, 0 abstentions.
• The bylaws requirements for Certificate Issuers, Certificate Consumers, and quorum were all met.
• The ballot then entered the IP Rights Review Period.

Compliance timing

• The ballot text states that the new reuse limit for Domain Names and IP Addresses is effective 2021-10-01.
• The same effective date applies to the Baseline Requirements change; the EVG replacement text is described in the ballot, but no separate date is stated for it.