CA/Browser Forum

Welcome to the CA/Browser Forum

The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).

More information for about the forum and information for Site Owners, Developers, Auditors and Assessors, and Potential Members can be found in the About section of this website.

Recent posts

Ballot SC105: Remove High Risk language from TLS BR and EVG
October 28, 2026 by Voting Results Certificate Issuers 27 votes in total:
Ballot SMC020: Remove Requirement to Record BR Version of Validation Method
October 5, 2026 by Stephen Davidson[Voting Results] Ballot SMC020: Remove Requirement to Record BR Version of Validation MethodThis Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.4). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is at https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.17-Redline.pdf Summary of Review Ballot for Review: Ballot SMC020: Remove requirement to record BR version of validation method
Minutes of the F2F 68 Meeting in Vienna, Austria - SCWG, September 23, 2026
September 23, 2026 by Wayne ThayerMinutes of the CA/Browser Forum Face-to-Face Meeting 68 Server Certificate Working Group, September 23, 2026Call to Order and Administrative Business Presiding: Dimitris Zacharopoulos (HARICA), SCWG Chair, with Wayne Thayer (Fastly) Agenda: No changes or additions were proposed; the agenda as circulated was approved. Approval of minutes: The minutes of the August 27 and September 10 teleconferences were each approved without objection, for publication. Membership — Huawei (Certificate Consumer applicant): Huawei’s application to join as a Certificate Consumer had been discussed at a prior teleconference, where the Forum had requested clarification from Huawei. Dimitris reported that Huawei’s responses had been circulated to the list and, in his view, adequately addressed the earlier concerns. There were no objections, online or in the room, and Huawei’s application as a Certificate Consumer was approved. Dustin Hollenback (Apple) asked whether the candidate-review process itself had been formalized following earlier feedback. Dimitris said he and Wayne Thayer would work on streamlining this process, likely in consultation with other working group chairs, since the same candidate-intake process applies across working groups. A candidate-information chart previously put together by Ryan Dickson (Google Chrome) was suggested as a starting point, along with including the list of standard clarifying questions (previously produced by Aaron Gable) on the wiki alongside the IPR agreement, so future candidates and reviewers have a consistent reference. Wayne Thayer was asked to post this material to the wiki. Membership MicroSec probationary-to-voting status: The chair noted that a member admitted earlier as a probationary member has now satisfied the attendance requirement for voting membership by participating in this Face-to-Face meeting, and the necessary status change would be made. Chair’s Report: Updates Since the Last Face-to-Face Presenter: Dimitris Zacharopoulos (HARICA)
More posts of the CA/Browser Forum
Latest releases
Server Certificate Requirements
SC100: DNSSEC Clarification and Consolidation - Sep 7, 2026

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.16 - Ballot SMC018 - Sep 29, 2026

This ballot implements the requirements of CCADB Policy Section 6.3 relating to cross-certificates into the S/MIME BR effective immediately. The ballot also specifies that effective July 1, 2027 id-kp-emailProtection (mandatory) and the id-kp-clientAuth (optional) are the only extKeyUsage (EKU) permitted in both Subordinate CA Certificates and Subscriber Certificates. Finally, the ballot clarifies in the Definitions that Legacy Generation profiles were deprecated effective July 15, 2025. This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Dustin Hollinback (Apple) and Ashish Dhiman (GlobalSign)

Network and Certificate System Security Requirements
Version 2.0.5 (Ballot NS-008) - Jul 9, 2025

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).