Ballot SC062v2: Certificate profiles update
Server Certificate Working Group
Key dates
- Effective date
- 15 Sep 2023 2 years ago
- Voting opened
- 09 Mar 2023 3 years ago
- Voting closed
- 16 Mar 2023 3 years ago
- Discussion opened
- 17 Feb 2023 3 years ago
- Discussion closed
- 09 Mar 2023 3 years ago
Resources
AI Summary
Ballot overview
- Ballot: SC-062 V2, Certificate profiles update (Server Certificate Working Group)
- Purpose: Update the Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates, focused on improving clarity of Section 7 (Certificate, CRL, and OCSP Profiles).
- Stated goals of the update:
- Better aligns certificate content expectations across certificate issuers and consumers
- Reduces confusion from the absence of a more precise certificate profile specification
- Promotes more consistent and reliable implementations across the ecosystem
- Scope note: While most updates focus on Section 7, changes were not limited to only this section.
Motion and normative effective date
- The ballot states that an all-encompassing effective date makes these changes normative beginning 2023-09-15.
- The ballot modifies the Baseline Requirements based on Version 1.8.6.
Discussion and voting timeline (as stated on the ballot page)
- Discussion:
- Start time: 2023-02-17 19:00:00 UTC
- End time: 2023-03-09 18:59:00 UTC
- Vote for approval:
- Start time: 2023-03-09 19:00:00 UTC
- End time: 2023-03-16 19:00:00 UTC
Adoption and voting results (Bylaws requirements)
- Certificate Issuers: 30 votes total; 30 YES, 0 NO, 0 ABSTAIN; adoption requirement of 2/3 or more was MET.
- Certificate Consumers: 3 votes total; 3 YES, 0 NO, 0 ABSTAIN; adoption requirement of 50% plus one was MET.
- Category participation: At least one Voting Member in each category voted in favour; requirement was MET.
- Quorum: Half of currently active members at start of voting was 14, so quorum was 15; requirement was MET.
Linked artifact highlights (GitHub compare text provided)
- The linked redline text includes changes to Baseline Requirements content, including updates related to CRLReason usage and revocation reason code requirements.
- The redline text explicitly references Subscriber Certificate revocation after July 15, 2023 for CRLReason inclusion requirements.
- Effective date
- 2023-09-15
- Voting opened
- 2023-03-09
- Voting closed
- 2023-03-16
- Discussion opened
- 2023-02-17
- Discussion closed
- 2023-03-09
2023-07-15 — CRLReason MUST be included in the reasonCode extension of the CRL entry corresponding to a Subscriber Certificate revoked after July 15, 2023, unless the CRLReason is unspecified (0). Revocation reason code entries for Subscriber Certificates revoked prior to July 15, 2023 do NOT need to be added or changed. Applies to Subscriber Certificates revoked after July 15, 2023 (for CRLReason inclusion in the reasonCode extension of the CRL entry corresponding to that revocation).
AI-generated from the CABF ballot page. The official CABF article remains the authoritative source.
Vote result
Proposers
Ryan Dickson of Google and endorsed by Clint Wilson of Apple and Dimitris Zacharopoulos of HARICA.
Excerpt
SearchHome » All CA/Browser Forum Posts » Ballot SC062v2: Certificate profiles updateBallot SC062v2: Certificate profiles updateVoting Results Certificate Issuers 30 votes total, with no abstentions: