CA/Browser Forum
Home » Working Groups » Server Cert WG » Baseline Requirements » Baseline Requirements for TLS Server Certificates

Baseline Requirements for TLS Server Certificates

Baseline Requirements

Current Version

CA-Browser-Forum TLS BR 2.1.4 (redlined) – adopted by Ballot SC084

Previous Versions

CA-Browser-Forum TLS BR 2.1.3 (redlined) – adopted by Ballot SC083

CA-Browser-Forum TLS BR 2.1.2 (redlined) – adopted by Ballot SC080

CA-Browser-Forum TLS BR 2.1.1 (redlined) – adopted by Ballot SC079

CA-Browser-Forum TLS BR 2.1.0 (redlined) – adopted by Ballot SC076

CA-Browser-Forum TLS BR 2.0.9 (redlined) – adopted by Ballot SC078

CA-Browser-Forum TLS BR 2.0.8 (redlined) – adopted by Ballot SC077

CA-Browser-Forum TLS BR 2.0.7 (redlined) – adopted by Ballot SC067

CA-Browser-Forum TLS BR 2.0.6 (redlined) – adopted by Ballot SC075

CA-Browser-Forum TLS BR 2.0.5 (redlined) – adopted by Ballot SC073

CA-Browser-Forum TLS BR 2.0.4 (redlined) – adopted by Ballot SC065

CA-Browser-Forum TLS BR 2.0.3 (redlined) – adopted by Ballot SC069

CA-Browser-Forum TLS BR 2.0.2 (redlined) – adopted by Ballot SC066

CA-Browser-Forum BR 2.0.1 (redlined) – adopted by Ballot SC063

CA-Browser-Forum BR 2.0.0 (redlined) – adopted by Ballot SC062

CA-Browser-Forum BR 1.8.7 (redlined) – adopted by Ballot SC061

CA-Browser-Forum BR 1.8.6 (redlined) – adopted by Ballot SC058

CA-Browser-Forum BR 1.8.5 (redlined) – adopted by Ballot SC056

CA-Browser-Forum BR 1.8.4 (redlined) – adopted by Ballot SC054

CA-Browser-Forum BR 1.8.3 (redlined) – adopted by Ballot SC051

CA-Browser-Forum BR 1.8.2 (redlined) – adopted by Ballot SC053

CA-Browser-Forum BR 1.8.1 (redlined) – adopted by Ballot SC050

CA-Browser-Forum BR 1.8.0 (redlined) – adopted by Ballot SC048

CA-Browser-Forum BR 1.7.9 (redlined) – adopted by Ballot SC047

CA-Browser-Forum BR 1.7.8 (redlined) – adopted by Ballot SC045

CA-Browser-Forum BR 1.7.7 (redlined) – adopted by Ballot SC046

CA-Browser-Forum BR 1.7.6 (redlined) – adopted by Ballot SC044

CA-Browser-Forum BR 1.7.5 (redlined) – adopted by Ballot SC042

CA-Browser-Forum BR 1.7.4 (redlined) – adopted by Ballot SC041

CA-Browser Forum BR 1.7.3 (redlined) – adopted by Ballots SC028 and SC035

CA-Browser Forum BR 1.7.2 (redlined) – adopted by Ballot SC033

CA-Browser Forum BR 1.7.1 (redlined) – adopted by Ballots SC030 and SC031

CA-Browser Forum BR 1.7.0 (redlined) – adopted by Ballot SC026

CA-Browser Forum BR 1.6.9 (redlined) – adopted by Ballot SC027

CA-Browser Forum BR 1.6.8 (redlined) – adopted by Ballot SC025

CA-Browser Forum BR 1.6.7 (redlined) – adopted by Ballots SC023, SC024

CA-Browser Forum BR 1.6.6 (redlined) – adopted by Ballots SC019

CA-Browser Forum BR 1.6.5 (redlined) – adopted by Ballots SC016

CA-Browser Forum BR 1.6.4 (redlined) – adopted by Ballots SC014, SC015, SC007

CA-Browser Forum BR 1.6.3 (redlined) – adopted by Ballot SC013

CA-Browser Forum BR 1.6.2 (redlined) – adopted by Ballot SC012

CA-Browser Forum BR 1.6.1 (redlined) – adopted by Ballot SC006

CA-Browser Forum BR 1.6.0 (redlined) – adopted by Ballot 224

CA-Browser Forum BR 1.5.9 (redlined) – adopted by Ballot 223

CA-Browser Forum BR 1.5.8 (redlined) – adopted by Ballot 219

CA-Browser Forum BR 1.5.7 – (redlined) – adopted by Ballot 220

CA-Browser Forum BR 1.5.6 – (redlined) – adopted by Ballot 218

CA-Browser Forum BR 1.5.5 – (redlined) – adopted by Ballot 217

CA-Browser Forum BR 1.5.4 – (redlined) – adopted by Ballot 215

CA-Browser Forum BR 1.5.3 – (redlined) – adopted by Ballot 214

CA-Browser Forum BR 1.5.2 – (redlined) – adopted by Ballot 190

CA-Browser Forum BR 1.5.1 – (redlined) – adopted by Ballot 197

CA-Browser Forum BR 1.5.0 – (redlined) – adopted by Ballot 212

CA-Browser Forum BR 1.4.9 – (redlined) – adopted by Ballot 204

CA-Browser Forum BR 1.4.8 – (redlined) – adopted by Ballot 199

CA-Browser Forum BR 1.4.7 – (redlined) – adopted by Ballot 196

CA-Browser Forum BR 1.4.6 – (redlined) – adopted by Ballot 195

CA-Browser Forum BR 1.4.5 – (redlined) – adopted by Ballot 189

CA-Browser Forum BR 1.4.4 – (redlined) – adopted by Ballot 193 on 17-March-2017

CA-Browser Forum BR 1.4.3 – (redlined) – adopted by Ballot 187 on 3-March-2017

CA-Browser Forum BR 1.4.2 – (redlined) – adopted by Ballot 181 on 1-January-2017

CA-Browser Forum BR 1.4.1 – (redlined) – adopted by Ballot 175 on 7 Sept. 2016

CA-Browser Forum BR 1.4.0 – (redlined) – adopted by Ballot 173 on 28 July 2016

CA-Browser Forum BR 1.3.9 – (redlined) – adopted by Ballot 174 on 29 August 2016

CA-Browser Forum BR 1.3.8 – (redlined) – adopted by Ballot 169 on 5 August 2016

CA-Browser Forum BR 1.3.7 – (redlined) – adopted by Ballot 164 on 8 July 2016

CA-Browser Forum BR 1.3.6 – (redlined) – adopted by Ballot 171 on 1 July 2016

CA-Browser Forum BR 1.3.5 – (redlined) – adopted by Ballot 168 on 10 May 2016

CA-Browser Forum BR 1.3.4 – (redlined) – adopted by Ballot 162 on 15 March 2016

CA-Browser Forum BR 1.3.3 – (redlined) – adopted by Ballot 160 on 4 February 2016

CA-Browser Forum BR 1.3.2 – (redlined) – adopted by Ballot 156 on 3 December 2015

CA-Browser Forum BR 1.3.1 – (redlined) – adopted by Ballot 151 on 28 September 2015

CA-Browser Forum BR 1.3.0 – adopted by Ballot 146 on 16 April 2015

Conversion Table for RFC-3647-formatted version 1.3.0 and later

Baseline Requirements 1.2.5 – (redlined) – adopted by Ballot 148 on 2 April 2015

Baseline Requirements 1.2.4 – (redlined) – adopted by Ballot 144 on 18 Feb 2015

Baseline Requirements 1.2.3 – (redlined) – adopted by Ballot 135 on 16 October 2014

Baseline Requirements 1.2.2 – (redlined) – adopted by Ballot 134 on 16 October 2014

Baseline Requirements 1.2.1 – (redlined) – adopted by Ballot 118 on 16 October 2014

Baseline Requirements 1.2.0 – (redlined) – adopted by Ballot 125 on 14 October 2014

Baseline Requirements 1.1.9 – (redlined) – adopted by Ballot 129 on 4 August 2014

Baseline Requirements 1.1.8 – (redlined) – adopted on 5 June 2014

Baseline Requirements 1.1.7 – (redlined) – effective 3 April 2014

Baseline Requirements 1.1.6 – (redlined) – effective 29 July, 2013

Baseline Requirements 1.1.5 – (redlined) – effective 31 May, 2013

Baseline Requirements 1.1.4 – (redlined) – effective 3 May, 2013

Baseline Requirements 1.1.3 – (redlined) – effective 21 February, 2013

Baseline Requirements 1.1 – effective 14 September, 2012

Baseline Requirements 1.1_日本語訳 (translated into Japanese) Baseline Requirements 1 – adopted on 22 Nov. 2011 with an Effective Date of 1 July 2012

Baseline Errata 1

Public Discussion Drafts

Baseline Requirements Draft 50

Baseline Requirements Draft 35

Baseline Requirements Draft 34

Baseline Requirements Draft 30b

Baseline Requirements
Latest releases
Server Certificate Requirements
SC-084: DNS Labeled With ACME Account ID Challenge (#566) - Mar 13, 2025

BRs release version 2.1.4

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.8 - Ballot SMC010 - Dec 23, 2024

This ballot adopts Multi-Perspective Issuance Corroboration (MPIC) for CAs when conducting Email Domain Control Validation (DCV) and Certification Authority Authorization (CAA) checks for S/MIME Certificates. The Ballot adopts the MPIC implementation consistent with the TLS Baseline Requirements. Acknowledging that some S/MIME CAs with no TLS operations may require additional time to deploy MPIC, the Ballot has a Compliance Date of May 15, 2025. Following that date the implementation timeline described in TLS BR section 3.2.2.9 applies. This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Ashish Dhiman (GlobalSign) and Nicolas Lidzborski (Google).

Network and Certificate System Security Requirements
v2.0 - Ballot NS-003 - Jun 26, 2024

Ballot NS-003: Restructure the NCSSRs in https://github.com/cabforum/netsec/pull/35

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).