Ballot SMC09 Pre-Linting, WebTrust for NetSec, and Minor Updates

Ballot overview

• Ballot SMC09 is titled Pre-Linting, WebTrust for NetSec, and Minor Updates.
• It modifies the Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates, based on Version 1.0.6.
• The ballot was adopted and the ballot passed.

What the ballot changes

• Requires WebTrust audits to include WebTrust for Network Security for audit periods starting after April 1, 2025.
• Introduces linting-related requirements for S/MIME Certificates:
  • CAs SHOULD implement pre-issuance linting starting March 15, 2025.
  • CAs SHALL implement pre-issuance linting starting September 15, 2025.
  • CAs SHOULD use linting in self-audits starting March 15, 2025.
• Clarifies that multiple certificatePolicy OIDs are allowed in end entity certificates.
• Clarifies use of organizationIdentifier and Registration Reference language.
• Updates Appendix A.2 Natural Person Identifiers, including TAX, TIN, and EID entries.

Adoption and publication

• The IPR period completed.
• No IPR Exclusion Notices were filed.
• The ballot was adopted as of November 22, 2024.
• The new S/MIME BR v.1.0.7 was published to the CABF public website.

Voting and procedural status

• The voting period completed and the ballot passed.
• Voting results were unanimous among the listed voters:
  • Certificate Issuers: 17 yes, 0 no, 0 abstain
  • Certificate Consumers: 3 yes, 0 no, 0 abstain
• Bylaw requirements for issuer and consumer approval were met.
• Quorum was met with 11 active voting members.