Because of their active involvement in various technical working groups outside the CA/Browser Forum, Members of the Forum have developed and published guidance on a variety of topics and have also collected links to helpful external resources and tools. The Resources area of this web site is where you can look for guidance on certificate use, including network and server configuration, browser capabilities, results of research and news about the industry.
What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8
This ballot includes updates for the following: • Require pre-linting of leaf end entity Certificates starting September 15, 2025 • Require WebTrust for Network Security for audits starting after April 1, 2025 • Clarify that multiple certificatePolicy OIDs are allowed in end entity certificates • Clarify use of organizationIdentifer references • Update of Appendix A.2 Natural Person Identifiers This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Clint Wilson (Apple) and Martijn Katerbarg (Sectigo).
Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35