Ballot SMC09 Pre-Linting, WebTrust for NetSec, and Minor Updates

Ballot SMC09: Pre-Linting, WebTrust for NetSec, and Minor Updates

Summary:

This ballot includes updates for the following:

• Require pre-linting of leaf end entity Certificates starting September 15, 2025
• Require WebTrust for Network Security for WebTrust audits starting after April 1, 2025
• Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates
• Clarify use of organizationIdentifer references
• Update of Appendix A.2 Natural Person Identifiers

This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).

— Motion Begins — This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted S/MIME Certificates” (“S/MIME Baseline Requirements”), based on Version 1.0.6. MODIFY the Baseline Requirements as specified in the following Redline: https://github.com/cabforum/smime/compare/c66dfe265f5fabf70150af68746d5cb9ba09f942...d295580ad2e1a15c56e786e851d110969a712437 — Motion Ends —

This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:

Discussion (at least 7 days):

• Start time: October 9, 2024 at 19:00:00 UTC • End time: October 16, 2024 at 19:00:00 UTC