CA/Browser Forum
Home » Working Groups » Server Cert WG » Baseline Requirements » Baseline Requirements for TLS Server Certificates

Baseline Requirements for TLS Server Certificates

Baseline Requirements

Current Version

CA-Browser-Forum TLS BR 2.1.2 (redlined) – adopted by Ballot SC80

Previous Versions

CA-Browser-Forum TLS BR 2.1.1 (redlined) – adopted by Ballot SC79

CA-Browser-Forum TLS BR 2.1.0 (redlined) – adopted by Ballot SC76

CA-Browser-Forum TLS BR 2.0.9 (redlined) – adopted by Ballot SC78

CA-Browser-Forum TLS BR 2.0.8 (redlined) – adopted by Ballot SC77

CA-Browser-Forum TLS BR 2.0.7 (redlined) – adopted by Ballot SC67

CA-Browser-Forum TLS BR 2.0.6 (redlined) – adopted by Ballot SC75

CA-Browser-Forum TLS BR 2.0.5 (redlined) – adopted by Ballot SC73

CA-Browser-Forum TLS BR 2.0.4 (redlined) – adopted by Ballot SC65

CA-Browser-Forum TLS BR 2.0.3 (redlined) – adopted by Ballot SC69

CA-Browser-Forum TLS BR 2.0.2 (redlined) – adopted by Ballot SC66

CA-Browser-Forum BR 2.0.1 (redlined) – adopted by Ballot SC63

CA-Browser-Forum BR 2.0.0 (redlined) – adopted by Ballot SC62

CA-Browser-Forum BR 1.8.7 (redlined) – adopted by Ballot SC61

CA-Browser-Forum BR 1.8.6 (redlined) – adopted by Ballot SC58

CA-Browser-Forum BR 1.8.5 (redlined) – adopted by Ballot SC56

CA-Browser-Forum BR 1.8.4 (redlined) – adopted by Ballot SC54

CA-Browser-Forum BR 1.8.3 (redlined) – adopted by Ballot SC51

CA-Browser-Forum BR 1.8.2 (redlined) – adopted by Ballot SC53

CA-Browser-Forum BR 1.8.1 (redlined) – adopted by Ballot SC50

CA-Browser-Forum BR 1.8.0 (redlined) – adopted by Ballot SC48

CA-Browser-Forum BR 1.7.9 (redlined) – adopted by Ballot SC47

CA-Browser-Forum BR 1.7.8 (redlined) – adopted by Ballot SC45

CA-Browser-Forum BR 1.7.7 (redlined) – adopted by Ballot SC46

CA-Browser-Forum BR 1.7.6 (redlined) – adopted by Ballot SC44

CA-Browser-Forum BR 1.7.5 (redlined) – adopted by Ballot SC42

CA-Browser-Forum BR 1.7.4 (redlined) – adopted by Ballot SC41

CA-Browser Forum BR 1.7.3 (redlined) – adopted by Ballots SC28 and SC35

CA-Browser Forum BR 1.7.2 (redlined) – adopted by Ballot SC33

CA-Browser Forum BR 1.7.1 (redlined) – adopted by Ballots SC30 and SC31

CA-Browser Forum BR 1.7.0 (redlined) – adopted by Ballot SC26

CA-Browser Forum BR 1.6.9 (redlined) – adopted by Ballot SC27

CA-Browser Forum BR 1.6.8 (redlined) – adopted by Ballot SC25

CA-Browser Forum BR 1.6.7 (redlined) – adopted by Ballots SC23, SC24

CA-Browser Forum BR 1.6.6 (redlined) – adopted by Ballots SC19

CA-Browser Forum BR 1.6.5 (redlined) – adopted by Ballots SC16

CA-Browser Forum BR 1.6.4 (redlined) – adopted by Ballots SC14, SC15, SC7

CA-Browser Forum BR 1.6.3 (redlined) – adopted by Ballot SC13

CA-Browser Forum BR 1.6.2 (redlined) – adopted by Ballot SC12

CA-Browser Forum BR 1.6.1 (redlined) – adopted by Ballot SC6

CA-Browser Forum BR 1.6.0 (redlined) – adopted by Ballot 224

CA-Browser Forum BR 1.5.9 (redlined) – adopted by Ballot 223

CA-Browser Forum BR 1.5.8 (redlined) – adopted by Ballot 219

CA-Browser Forum BR 1.5.7 – (redlined) – adopted by Ballot 220

CA-Browser Forum BR 1.5.6 – (redlined) – adopted by Ballot 218

CA-Browser Forum BR 1.5.5 – (redlined) – adopted by Ballot 217

CA-Browser Forum BR 1.5.4 – (redlined) – adopted by Ballot 215

CA-Browser Forum BR 1.5.3 – (redlined) – adopted by Ballot 214

CA-Browser Forum BR 1.5.2 – (redlined) – adopted by Ballot 190

CA-Browser Forum BR 1.5.1 – (redlined) – adopted by Ballot 197

CA-Browser Forum BR 1.5.0 – (redlined) – adopted by Ballot 212

CA-Browser Forum BR 1.4.9 – (redlined) – adopted by Ballot 204

CA-Browser Forum BR 1.4.8 – (redlined) – adopted by Ballot 199

CA-Browser Forum BR 1.4.7 – (redlined) – adopted by Ballot 196

CA-Browser Forum BR 1.4.6 – (redlined) – adopted by Ballot 195

CA-Browser Forum BR 1.4.5 – (redlined) – adopted by Ballot 189

CA-Browser Forum BR 1.4.4 – (redlined) – adopted by Ballot 193 on 17-March-2017

CA-Browser Forum BR 1.4.3 – (redlined) – adopted by Ballot 187 on 3-March-2017

CA-Browser Forum BR 1.4.2 – (redlined) – adopted by Ballot 181 on 1-January-2017

CA-Browser Forum BR 1.4.1 – (redlined) – adopted by Ballot 175 on 7 Sept. 2016

CA-Browser Forum BR 1.4.0 – (redlined) – adopted by Ballot 173 on 28 July 2016

CA-Browser Forum BR 1.3.9 – (redlined) – adopted by Ballot 174 on 29 August 2016

CA-Browser Forum BR 1.3.8 – (redlined) – adopted by Ballot 169 on 5 August 2016

CA-Browser Forum BR 1.3.7 – (redlined) – adopted by Ballot 164 on 8 July 2016

CA-Browser Forum BR 1.3.6 – (redlined) – adopted by Ballot 171 on 1 July 2016

CA-Browser Forum BR 1.3.5 – (redlined) – adopted by Ballot 168 on 10 May 2016

CA-Browser Forum BR 1.3.4 – (redlined) – adopted by Ballot 162 on 15 March 2016

CA-Browser Forum BR 1.3.3 – (redlined) – adopted by Ballot 160 on 4 February 2016

CA-Browser Forum BR 1.3.2 – (redlined) – adopted by Ballot 156 on 3 December 2015

CA-Browser Forum BR 1.3.1 – (redlined) – adopted by Ballot 151 on 28 September 2015

CA-Browser Forum BR 1.3.0 – adopted by Ballot 146 on 16 April 2015

Conversion Table for RFC-3647-formatted version 1.3.0 and later

Baseline Requirements 1.2.5 – (redlined) – adopted by Ballot 148  on 2 April 2015

Baseline Requirements 1.2.4 – (redlined) – adopted by Ballot 144 on 18 Feb 2015

Baseline Requirements 1.2.3 – (redlined) – adopted by Ballot 135 on 16 October 2014

Baseline Requirements 1.2.2 – (redlined) – adopted by Ballot 134 on 16 October 2014

Baseline Requirements 1.2.1 – (redlined) – adopted by Ballot 118 on 16 October 2014

Baseline Requirements 1.2.0 – (redlined) – adopted by Ballot 125 on 14 October 2014

Baseline Requirements 1.1.9 – (redlined) – adopted by Ballot 129 on 4 August 2014

Baseline Requirements 1.1.8 – (redlined) – adopted on 5 June 2014

Baseline Requirements 1.1.7 – (redlined) – effective 3 April 2014

Baseline Requirements 1.1.6 – (redlined) – effective 29 July, 2013

Baseline Requirements 1.1.5 – (redlined) – effective 31 May, 2013

Baseline Requirements 1.1.4 – (redlined) – effective 3 May, 2013

Baseline Requirements 1.1.3 – (redlined) – effective 21 February, 2013

Baseline Requirements 1.1 – effective 14 September, 2012

Baseline Requirements 1.1_日本語訳  (translated into Japanese) Baseline Requirements 1 – adopted on 22 Nov. 2011 with an Effective Date of 1 July 2012

Baseline Errata 1

Public Discussion Drafts

Baseline Requirements Draft 50

Baseline Requirements Draft 35

Baseline Requirements Draft 34

Baseline Requirements Draft 30b

Baseline Requirements
Latest releases
Server Certificate Requirements
BRs/2.1.2 SC-080 V3: Sunset the use of WHOIS to identify Domain Contacts and relying DCV Methods - Dec 16, 2024

Ballot SC-080 V3: “Sunset the use of WHOIS to identify Domain Contact… (https://github.com/cabforum/servercert/pull/560) Ballot SC-080 V3: “Sunset the use of WHOIS to identify Domain Contacts and relying DCV Methods” (https://github.com/cabforum/servercert/pull/555)

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.8 - Ballot SMC010 - Dec 23, 2024

This ballot adopts Multi-Perspective Issuance Corroboration (MPIC) for CAs when conducting Email Domain Control Validation (DCV) and Certification Authority Authorization (CAA) checks for S/MIME Certificates. The Ballot adopts the MPIC implementation consistent with the TLS Baseline Requirements. Acknowledging that some S/MIME CAs with no TLS operations may require additional time to deploy MPIC, the Ballot has a Compliance Date of May 15, 2025. Following that date the implementation timeline described in TLS BR section 3.2.2.9 applies. This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Ashish Dhiman (GlobalSign) and Nicolas Lidzborski (Google).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).