All CA/Browser Forum Posts on CA/Browser Forum

Ballot SMC018: Realignment of Multipurpose use cases

Tue, 11 Aug 2026 00:00:00 +0000

Ballot SMC018: Realignment of Multipurpose use cases

Summary:

This ballot implements the requirements of CCADB Policy Section 6.3 relating to cross-certificates into the S/MIME BR effective immediately.

Ballot SC100: DNSSEC Clarification and Consolidation

Thu, 06 Aug 2026 00:00:00 +0000

Voting Results

Certificate Issuers

22 votes in total:

2026-07-30 Minutes of the Server Certificate Working Group

Thu, 30 Jul 2026 00:00:00 +0000

Minutes for the Server Certificate Working Group teleconference - July 30, 2026

Meeting Date:

2026-07-30

Note Well:

Wayne Thayer chaired the meeting in Dimitris Zacharopoulos’s absence.
The Note Well was read.
Prior to the start of the meeting, attendees briefly discussed enabling the Webex AI Assistant to generate meeting notes. No objections were raised, and the AI assistant was enabled on a trial basis.

Review of Agenda:

No changes or additions were proposed to the published agenda.

Approval of Minutes:

July 2, 2026 Teleconference approved without objection.
July 16, 2026 Teleconference approved without objection.

Membership Applications:

There were no new membership applications.

Ballot Status:

SC-100 - DNSSEC Clarifications / Consolidation: Rich Smith reported that no additional comments had been received and that the discussion-period restart resolved prior concerns. Barring further objections, the ballot will enter the voting period at 17:00 UTC on July 30. Scott Rea expressed support for moving the ballot forward.
SC-103 - Require EKUs for Cross-Certified Subordinate CAs: Aaron Gable reported that discussion remains active on the mailing list and outstanding questions still require responses. The ballot will remain in discussion until those issues are resolved. Let’s Encrypt has been busy implementing MTC issuance.
Ballots in Voting: None.
Ballots in IPR Review: Wayne Thayer reminded members that SC-101 and SC-102 remain under IPR review and encouraged members to complete their reviews before the review periods expire.
Draft Ballots:
- Martijn Katerbarg’s Certificate Problem Report / Revocation clarification ballot received no update.
- Gurleen Grewal reported that work continues to reconcile the two ML-DSA proposal drafts, but there are no other updates at this time.
- No update was available on Dimitris Zacharopoulos’s revocation timeline ballot.

CCADB Roadmap and API Discussion:

Stephen Davidson suggested holding a future discussion devoted to the CCADB roadmap and API, noting that increasing reliance on CCADB automation makes it useful to discuss future plans and gather structured feedback from API users.
Discussion included:
- Chad Dandar suggested the topic could be discussed during a future CCADB SC meeting.
- Aaron Poulsen supported including API documentation and sandbox capabilities in such a discussion.
- Ryan Dickson shared the current API documentation in chat: https://github.com/mozilla/CCADB-Tools/tree/master/API_AddUpdateIntermediateCert.
- Arman Asemani recommended beginning with a discussion thread on public@ccadb.org so that written feedback and enhancement requests could be collected before scheduling a broader discussion.
- Stephen Davidson agreed to initiate the mailing list discussion.

Any Other Business:

No other business was discussed.

Adjourn

The meeting adjourned. The next Server Certificate Working Group teleconference is scheduled for 2026-08-13.

Attendees:

Jeff Stapleton (Wells Fargo), Naresh Charugundla (Microsoft), Moritz Schaal (D-Trust), Aaron Gable (Let’s Encrypt), Aaron Poulsen (SSL.com), Abdul Hakeem Putra (MSC Trustgate Sdn Bhd), Adam Fiock (SSL.com), Adam Jones (Microsoft), Adriano Santoni (Actalis S.p.A.), Andrea Holland (IdenTrust), Antti Backman (Telia Company), Arman Asemani (Apple), Arno Fiedler (ETSI), Ben Wilson (Mozilla), Chad Dandar (Cisco Systems), Chris Clements (Google), Clint Wilson (Apple), Corey Rasmussen (OATI), Dan McKinney (US Federal PKI Management Authority), Dean Coclin (DigiCert), Dustin Hollenback (Apple), Eric Kramer (Sectigo), Gregory Tomko (GlobalSign), Gurleen Grewal (Google), Hogeun Yoo (NAVER Cloud Trust Services), Inaba Atsushi (GlobalSign), Johnny Reading (GoDaddy), Jos Purvis (Fastly), Josselin Allemandou (Certigna (DHIMYOTIS)), Jun Okura (Cybertrust Japan), Karolina Ruszczyńska (Asseco Data Systems SA (Certum)), Kiran Tummala (Apple), Li-Chun Chen (Chunghwa Telecom), Lucy Buecking (IdenTrust), Luis Cervantes (SSL.com), Luis Osses (Amazon), Mahua Chaudhuri (Microsoft), Masaru Sakamoto (Cybertrust Japan), Michelle Coon (OATI), Miguel Sanchez (Google), Mrugesh Chandarana (IdenTrust), Nate Smith (GoDaddy), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Peter Miskovic (Disig), Rebecca Kelly (SSL.com), Rich Smith (DigiCert), Rob White (GoDaddy), Rollin Yu (TrustAsia), Roman Fischer (SwissSign), Ryan Dickson (Google), Sándor Szőke (Microsec), Sandy Balzer (SwissSign), Scott Rea (eMudhra), Sean Huang (TWCA), Stephen Davidson (DigiCert), Tadahiko Ito (SECOM Trust Systems), Thomas Zermeno (SSL.com), Tobias Josefowitz (Opera Software AS), Tsung-Min Kuo (Chunghwa Telecom), Wayne Thayer (Fastly), Zoey Wang (TrustAsia)

2026-07-16 Minutes of the Server Certificate Working Group

Thu, 16 Jul 2026 00:00:00 +0000

Minutes:

CA/Browser Forum

Server Certificate Working Group Minutes

July 16, 2026

Opening Matters

Dimitris Zacharopoulos chaired the meeting. The meeting was called to order. The meeting was recorded, the list of attendees is below, and the Note Well was read.

Ballot SC102: EV Domain Reuse and Validity Alignment

Tue, 14 Jul 2026 00:00:00 +0000

Voting Results

Certificate Issuers

19 votes in total:

2026-07-02 Minutes of the Server Certificate Working Group

Thu, 02 Jul 2026 00:00:00 +0000

Minutes:

Meeting Title: Server Certificate Working Group Teleconference

2026-07-01 Minutes of the S/MIME Certificate Working Group

Wed, 01 Jul 2026 00:00:00 +0000

Minutes of SMCWG

July 01, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot SC0101v2: Clarify Authorization Domain Names

Wed, 01 Jul 2026 00:00:00 +0000

Voting Results

Certificate Issuers

27 votes in total:

2026-06-18 Minutes of the Forum

Thu, 18 Jun 2026 00:00:00 +0000

Minutes:

CA/B Forum plenary Meeting - June 18, 2026

1. Roll Call – from recording

2. Read note-well

The note-well was read by Dimitris in prior session.

2026-06-18 Minutes of the Server Certificate Working Group

Thu, 18 Jun 2026 00:00:00 +0000

Minutes:

Roll Call – from recording

We also had the following persons present:

Naresh Charugundla (Microsoft), Rajeev Mohindra (Microsoft), Logan Mabe (Microsoft) who were not registered in the Member’s tool.

Read note-well

The note-well was read by Dimitris.

Review of Agenda

The Agenda as provided on list prior to the call (see above).

Minutes

June 4, 2026 (Draft minutes were distributed on 2026-06-16) – are Approved

Membership Applications

No current Applications to review.

Ballot Status

SC101v2 (https://github.com/cabforum/servercert/pull/627) Clarify Authorization Domain Names (Aaron Gable)

Ballot moved to V2 with substantive change being effective date in 3.2.2.5.3. A couple of other editorial updates also. Expected to go to discussion period tomorrow.

2026-06-17 Minutes of the S/MIME Certificate Working Group

Wed, 17 Jun 2026 00:00:00 +0000

Minutes of SMCWG

June 17, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot CSC-32: Make a Reserved Policy OID mandatory

Tue, 16 Jun 2026 00:00:00 +0000

The Intellectual Property Review (IPR) period for Ballot CSC-32 (Ballot CSC-32: Make a Reserved Policy OID mandatory) has completed.

No IPR Exclusion Notices were filed, and the ballot is adopted as of November 17, 2025.

The new CSC BRs v3.10.0 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-CSCBR-3.11.0.pdf

IPR Review of Ballot CSC-32: Make a Reserved Policy OID mandatory

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.3). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice is attached to this email.

Ballot SMC017v2: Increase Minimum RSA CA Key Size

Tue, 16 Jun 2026 00:00:00 +0000

[Adopted] Ballot SMC017v2: Increase Minimum RSA CA Key Size

The Intellectual Property Review (IPR) period for Ballot SMC017v2 (Increase Minimum RSA CA Key Size) has completed. No IPR Exclusion Notices were filed, and the ballot is adopted as of July 30, 2026. The new S/MIME BR v.1.0.15 have been published to the CABF public website in accordance with the Bylaws: https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.15.pdf

[IPR Review] Ballot SMC017v2: Increase Minimum RSA CA Key Size

This Review Notice is sent pursuant to Section 4.1 of the CA/Browser Forum’s Intellectual Property Rights Policy (v1.4). This Review Period of 30 days is for one Final Maintenance Guidelines. The complete Draft Maintenance Guideline that is the subject of this Review Notice may be found at https://cabforum.org/uploads/CA-Browser-Forum-SMIMEBR-1.0.15-Redline.pdf.

2026-06-11 Minutes of the Code Signing Certificate Working Group

Thu, 11 Jun 2026 00:00:00 +0000

Code Signing Working Group Minutes

June 11, 2026

Antitrust Reminder

The Note Well was read.

2026-06-04 Minutes of the Forum

Thu, 04 Jun 2026 00:00:00 +0000

Minutes:

Attendees

Aaron Gable (Let’s Encrypt), Aaron Poulsen (SSL.com), Adam Folson (IdenTrust), Adriano Santoni (Actalis S.p.A.), Alexandros Afentoulis (HARICA), Alvin Wang (SHECA), Andrea Holland (IdenTrust), Antti Backman (Telia Company), Arman Asemani (Apple), Ben Wilson (Mozilla), Chad Dandar (Cisco Systems), Chris Clements (Google), Clint Wilson (Apple), Cynethia Brown (US Federal PKI Management Authority), Daryn Wright (Apple), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Dustin Hollenback (Apple), Eamon Zhang (TrustAsia), Eleftheria Theologou (HARICA), Enrico Entschew (D-TRUST), Eric Hampshire (Cisco Systems), Georgy Sebastian (Amazon), Grace Cimaszewski (Grace Cimaszewski (Private Person)), Gregory Tomko (GlobalSign), Gurleen Grewal (Google), Hazhar Ismail (MSC Trustgate Sdn Bhd), Henry Birge-Lee (Henry Birge-Lee (Private person)), Hogeun Yoo (NAVER Cloud Trust Services), Inaba Atsushi (GlobalSign), India Donald (US Federal PKI Management Authority), Jan Smith (US Federal PKI Management Authority), Jinhwan Shin (CPA Canada/WebTrust), Joe DeBlasio (Google), John Mason (Microsoft), Johnny Reading (GoDaddy), Joseph Cigin (Joseph Cigin (Private Person)), Jos Purvis (Fastly), Josselin Allemandou (Certigna (DHIMYOTIS)), Jun Okura (Cybertrust Japan), Karina Sirota (Microsoft), Kateryna Aleksieieva (Asseco Data Systems SA (Certum)), Kiran Tummala (Apple), Li-Chun Chen (Chunghwa Telecom), Lilia Dubko (CPA Canada/WebTrust), Lucy Buecking (IdenTrust), Mads Henriksveen (Buypass AS), Mahua Chaudhuri (Microsoft), Marijn Nagelkerke (360 Browser), Mark Gamache (Mark Gamache (Private Person)), Mark Nelson (IdenTrust), Martijn Katerbarg (Sectigo), Masaru Sakamoto (Cybertrust Japan), Masatoshi Shigaki (CPA Canada/WebTrust), Matthew McPherrin (Let’s Encrypt), Michelle Coon (OATI), Mrugesh Chandarana (IdenTrust), Nate Smith (GoDaddy), Nick France (Sectigo), Nome Huang (TrustAsia), Ono Fumiaki (SECOM Trust Systems), Paul van Brouwershaven (Entrust), Paul van Brouwershaven (Digitorus), Pekka Lahtiharju (Telia Company), Peter Miskovic (Disig), Rebecca Kelly (SSL.com), Rob Brady (SGNR, LLC), Rob Stradling (Sectigo), Rob White (GoDaddy), Rollin Yu (TrustAsia), Roman Fischer (SwissSign), Sándor Szőke (Microsec), Sandy Balzer (SwissSign), Scott Rea (eMudhra), Sean Huang (TWCA), Sven Rajala (Keyfactor), Tadahiko Ito (SECOM Trust Systems), Tathan Thacker (IdenTrust), Thomas Connelly (US Federal PKI Management Authority), Thomas Zermeno (SSL.com), Tim Callan (Sectigo), Tim Crawford (CPA Canada/WebTrust), Tobias Josefowitz (Opera Software AS), Trevoli Ponds-White (Amazon), Tsung-Min Kuo (Chunghwa Telecom), Vikas Khanna (Microsoft), Vinay Kumar (OATI), Wayne Thayer (Fastly), Wendy Brown (US Federal PKI Management Authority), Zhao Kuisen (NovaVanguard Technology Co., Ltd.)

2026-06-04 Minutes of the Server Certificate Working Group

Thu, 04 Jun 2026 00:00:00 +0000

Minutes:

Dimitris leading the meeting and taking minutes
Dimitris read the note-well.
No changes were requested for the agenda.
Minutes approval
- May 21, 2026 - these minutes were distributed on 2026-05-21. The minutes were approved.
Next call: June 18, 2026

Attendees

2026-06-03 Minutes of the S/MIME Certificate Working Group

Wed, 03 Jun 2026 00:00:00 +0000

Minutes of SMCWG

June 3, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

Ballot SC087v2: Registration Number Improvement for EV Certificates

Wed, 03 Jun 2026 00:00:00 +0000

Voting Results

Certificate Issuers

18 votes in total:

2026-05-21 Minutes of the Forum

Thu, 21 May 2026 00:00:00 +0000

Minutes:

Meeting Metadata

Meeting Title: CA/Browser Forum Date: 21 May 2026
Chair: Dimitris Zacharopoulos
Minutes Taken By: Wayne Thayer

1. Begin Recording - Roll Call

2. Reading of Note-well

The Note-Well was read

2026-05-21 Minutes of the Server Certificate Working Group

Thu, 21 May 2026 00:00:00 +0000

Minutes:

1. Begin Recording - Roll Call

Meeting called to order by Dimitris Zacharopoulos.

2026-05-20 Minutes of the S/MIME Certificate Working Group

Wed, 20 May 2026 00:00:00 +0000

Minutes of SMCWG

May 20, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

2026-05-14 Minutes of the Code Signing Certificate Working Group

Thu, 14 May 2026 00:00:00 +0000

Code Signing Working Group Minutes

Date

2026-05-14

Antitrust Reminder

The Note Well was read

Ballot SC098v2: Process RFC 8657 CAA Parameters

Wed, 13 May 2026 00:00:00 +0000

Voting Results

Certificate Issuers

23 votes in total:

2026-05-07 Minutes of the Forum

Thu, 07 May 2026 00:00:00 +0000

Minutes:

1. Begin Recording - Roll Call

2. Reading of Note-well

The Note-Well was read

2026-05-07 Minutes of the Server Certificate Working Group

Thu, 07 May 2026 00:00:00 +0000

Minutes:

Meeting Title: CA/Browser Forum SCWG Teleconference

Date: 7 May 2026

Chair: Dimitris Zacharopoulos

Minutes Taken By: Lynn Jeun

1. Begin Recording - Roll Call

Meeting called to order by Dimitris Zacharopoulos.

2026-05-06 Minutes of the S/MIME Certificate Working Group

Wed, 06 May 2026 00:00:00 +0000

Minutes of SMCWG

May 6, 2026

These are the Minutes of the meeting described in the subject of this message. Corrections and clarifications where needed are encouraged by reply.

2026-04-30 Minutes of the Code Signing Certificate Working Group

Thu, 30 Apr 2026 00:00:00 +0000

Code Signing Working Group Minutes

Date

2026-04-30

Chair

Inigo Barreira (acting Chair)

Ballot SMC017: Increase Minimum RSA CA Key Size

Wed, 29 Apr 2026 00:00:00 +0000

Ballot SMC017: Increase Minimum RSA CA Key Size

Ballot SMC017 was withdrawn on May 12, 2026.

Ballot SMC017: Increase Minimum RSA CA Key Size

Summary:

This ballot increases the minimum RSA key size for Root and Subordinate CA certificates in the S/MIME BRs from 2048 to 4096 bits for keys created on or after September 15, 2026, while retaining the 2048-bit minimum for Subscriber certificates.

2026-04-23 Minutes of the Forum

Thu, 23 Apr 2026 00:00:00 +0000

Minutes:

Final Minutes for CA/B Forum Plenary Meeting - April 23, 2026

Attendees

Aaron Gable (ISRG), Adam Folsom (IdenTrust), Antti Backman (Telia Company), Antti Backman (Telia Company), Antti Backman (Telia Company), Antti Backman (Telia Company), Atsushi INABA (GlobalSign), Ben Wilson (Mozilla), Benjamin (ChungHwa Telecom), Chris Clements (Google Chrome), Clint Wilson (Apple), Corey Bonnell (DigiCert), Daryn Wright (Apple), Dean Coclin (DigiCert), Dimitris Zacharopoulos (HARICA), Dustin Hollenback (Apple), Enrico Entschew (D-Trust), Greg Tomko (GlobalSign), Gurleen Grewal (GTS), Hazhar Ismail (MSC Trustgate), Hogeun Yoo (NAVER Cloud Trust Services), Inigo Barreira (Sectigo), Jaime Hablutzel (WISekey), Janet Hines (SSL.com), Jeff Ward (Aprio), Johnny Reading (GoDaddy), Jos Purvis (Fastly), Jun Okura (Cybertrust), Karolina Ruszczynska (Certum), Kateryna Aleksieieva (Certum by Asseco), Lilia Dubko (CPA Canada), Lucy Buecking (IdenTrust), Luis Osses (Amazon Trust Services), Mahua Chaudhuri (Microsoft), Martijn Katerbarg (Sectigo), Matthew McPherrin (ISRG), Michelle Coon (OATI), Mrugesh Chandarana (IdenTrust), Nate Smith (GoDaddy), Nome Huang (TrustAsia), ONO Fumiaki (SECOM), Peter Miskovic (Disig), Rob White (GoDaddy), Rollin Yu (TrustAsia), Roman Fischer (SwissSign), Sándor Szöke (Microsec), Scott Rea (eMudhra), Sean Huang (TWCA), Stephen Davidson (DigiCert), Tadahiko ITO (SECOM), Thomas Zermeno (SSL.com), Tim Callan (Sectigo), Tobias Josefowitz (Opera), Trevoli Ponds-White (Amazon Trust Services), Tsung-Min Kuo (Chunghwa Telecom), Wayne Thayer (Fastly)

2026-04-23 Minutes of the Server Certificate Working Group

Thu, 23 Apr 2026 00:00:00 +0000

Minutes:

Begin Recording - Roll Call

Recording started