Ballot CSC-17: Subscriber Private Key Extension

Notice of Review Period

(Mailing list post is available here.)

The IPR review period ended on October 28, 2022 and no exclusion notices were filed.

The final documents, with the effective date being 2022-10-28, are available here.

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period is for a Final Maintenance Guideline (30 day Review Period). The complete Draft Guideline subject of this Review Notice is available here.

Ballot for Review: Ballot CSCWG-17

Start of Review Period: September 27, 2022 at 5:00pm Eastern Time

End of Review Period: October 27, 2022 at 5:00pm Eastern Time

Please forward a written notice to exclude Essential Claims to the Forum and Working Group Chair by email to and a copy to the CA/B Forum CSCWG public mailing list before the end of the Review Period. See current version of CA/Browser Forum Intellectual Property Rights Policy for details.

Results of Voting

Certificate IssuersDigiCert
Certificate ConsumersMicrosoft
This ballot has PASSED.

Purpose of the Ballot

This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates“ version 3.1 according to the attached redline which includes the change of the effective date of November 15, 2021, to June 1, 2023, subscriber key protection and verification requirements in the following sections:

  • Section Subscriber Private Key protection
  • Section Subscriber Private Key verification
  • Section 1.2.2 Relevant Dates

The change to extend the effective date for these sections regarding subscriber private key protection is to provide approximately 1 year of time from the public announcement of the requirement change for all effected parties to implement the changes.

The following motion has been proposed by Ian McMillan of Microsoft and endorsed by Tim Hollebeek of DigiCert and Bruce Morton of Entrust.


This ballot updates the “Baseline Requirements for the Issuance and Management of Publicly‐Trusted Code Signing Certificates” version 3.1 by replacing the entirely of the content of the document with the attached document.

Check Also

2023-08-10 Minutes of the Code Signing Certificate Working Group

Attendees: Abhishek Bhat (eMudhra), Andrea Holland (VikingCloud), Ben Dewberry (Keyfactor), Brianca Martin (Amazon), Corey Bonnell …