Welcome to the CA/Browser Forum
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).
More information for about the forum and information for Site Owners, Developers, Auditors and Assessors, and Potential Members can be found in the About section of this website.
Recent posts
2026-06-18 Minutes of the Server Certificate Working Group
June 18, 2026 by Wayne ThayerMinutes: Roll Call – from recording We also had the following persons present: Naresh Charugundla (Microsoft), Rajeev Mohindra (Microsoft), Logan Mabe (Microsoft) who were not registered in the Member’s tool. Read note-well The note-well was read by Dimitris. Review of Agenda The Agenda as provided on list prior to the call (see above). Minutes June 4, 2026 (Draft minutes were distributed on 2026-06-16) – are Approved Membership Applications No current Applications to review. Ballot Status SC101v2 (https://github.com/cabforum/servercert/pull/627) Clarify Authorization Domain Names (Aaron Gable) Ballot moved to V2 with substantive change being effective date in 3.2.2.5.3. A couple of other editorial updates also. Expected to go to discussion period tomorrow.
June 18, 2026 by Wayne ThayerMinutes: Roll Call – from recording We also had the following persons present: Naresh Charugundla (Microsoft), Rajeev Mohindra (Microsoft), Logan Mabe (Microsoft) who were not registered in the Member’s tool. Read note-well The note-well was read by Dimitris. Review of Agenda The Agenda as provided on list prior to the call (see above). Minutes June 4, 2026 (Draft minutes were distributed on 2026-06-16) – are Approved Membership Applications No current Applications to review. Ballot Status SC101v2 (https://github.com/cabforum/servercert/pull/627) Clarify Authorization Domain Names (Aaron Gable) Ballot moved to V2 with substantive change being effective date in 3.2.2.5.3. A couple of other editorial updates also. Expected to go to discussion period tomorrow.
Ballot CSC-32: Make a Reserved Policy OID mandatory
June 16, 2026 by The Intellectual Property Review (IPR) period for Ballot CSC-32 (Ballot CSC-32: Make a Reserved Policy OID mandatory) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of November 17, 2025. The new CSC BRs v3.10.0 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-CSCBR-3.11.0.pdf IPR Review of Ballot CSC-32: Make a Reserved Policy OID mandatory This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is attached to this email.
June 16, 2026 by The Intellectual Property Review (IPR) period for Ballot CSC-32 (Ballot CSC-32: Make a Reserved Policy OID mandatory) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of November 17, 2025. The new CSC BRs v3.10.0 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-CSCBR-3.11.0.pdf IPR Review of Ballot CSC-32: Make a Reserved Policy OID mandatory This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is attached to this email.
Ballot SMC017v2: Increase Minimum RSA CA Key Size
June 16, 2026 by Stephen DavidsonBallot SMC017v2: Increase Minimum RSA CA Key SizeSummary: This ballot increases the minimum RSA key size for Root and Subordinate CA certificates in the S/MIME BRs from 2048 to 4096 bits for keys created after September 15, 2026, while retaining the 2048-bit minimum for Subscriber certificates. The ballot further requires that by September 15, 2027, CAs SHALL NOT issue Subscriber certificates from any Sub-CA whose RSA key modulus is less than 3072 bits, effectively sunsetting issuance from legacy 2048-bit Sub-CAs. The ballot also includes minor typographic corrections.
More posts of the CA/Browser ForumJune 16, 2026 by Stephen DavidsonBallot SMC017v2: Increase Minimum RSA CA Key SizeSummary: This ballot increases the minimum RSA key size for Root and Subordinate CA certificates in the S/MIME BRs from 2048 to 4096 bits for keys created after September 15, 2026, while retaining the 2048-bit minimum for Subscriber certificates. The ballot further requires that by September 15, 2027, CAs SHALL NOT issue Subscriber certificates from any Sub-CA whose RSA key modulus is less than 3072 bits, effectively sunsetting issuance from legacy 2048-bit Sub-CAs. The ballot also includes minor typographic corrections.