Ballot SC072: Delete except to policyQualifiers in EVGs; align with BRs by making them NOT RECOMMENDED

Ballot overview

• Ballot code/title: SC-072 / Ballot SC072: Delete except to policyQualifiers in EVGs; align with BRs by making them NOT RECOMMENDED
• Working group: Server Certificate Working Group
• Purpose: Update the TLS Extended Validation Guidelines (EVGs) by removing exceptions to policyQualifiers in section 9.7 to align EVGs with the Baseline Requirements (BRs).
• Motion endorsement: Proposed by Paul van Brouwershaven (Entrust) and endorsed by Dimitris Zacharopoulos (HARICA) and Iñigo Barreira (Sectigo).

What changes (as evidenced)

• The ballot modifies the EV Guidelines (based on version 1.8.1) according to the referenced redline.
• The GitHub diff shows removal of EV certificate requirements related to policyQualifiers in the EV Guidelines:
  • Removes requirements that the certificatePolicies extension in EV Certificates issued to Subscribers MUST include:
    • certificatePolicies:policyQualifiers:policyQualifierId (id-qt 1 [RFC 5280])
    • certificatePolicies:policyQualifiers:qualifier:cPSuri (HTTP URL for the Subordinate CA Certification Practice Statement)
  • Adjusts numbering of subsequent requirements (e.g., cRLDistributionPoints requirement becomes section 3).

Voting and adoption status (as evidenced)

• Certificate Issuers: 15 votes total; 15 YES; 0 NO; 0 ABSTAIN.
• Certificate Consumers: 2 votes total; 2 YES; 0 NO; 0 ABSTAIN.
• Bylaws requirements:
  • Bylaw 2.3(6) requirements were MET.
  • Bylaw 2.3(7) quorum requirement was MET (quorum was 15).
• Result: current_status is passed.

IPR review / exclusion notice process (as evidenced)

• A 30-day IPR review period is described for a Final Maintenance Guideline.
• Members with Essential Claims to exclude must forward a written Notice to Exclude Essential Claims to the Working Group Chair and also submit a copy to the CA/B Forum public mailing list before the end of the Review Period.
• The IPR policy excerpt states that Exclusion Notices are effective upon receipt by the CAB Forum Chair and must be provided within the Review Period.

Relevant dates shown on the ballot page

• Discussion: 2024-03-15 to 2024-03-22
• Vote for approval: 2024-03-25 to 2024-04-01
• IPR review period: 3 April 2024 at 10:00 UTC to 3 May 2024 at 10:00 UTC
• Document history in the redlined artifact shows an EV Guidelines version 2.0.1 / SC72 effective date of 6 May 2024 (listed in the document history table).