CA/Browser Forum
Home » Working Groups » Server Cert WG » Baseline Requirements » Baseline Requirements for TLS Server Certificates

Baseline Requirements for TLS Server Certificates

Baseline Requirements

Current Version

CA-Browser-Forum TLS BR 2.2.6 (redlined) – adopted by Ballot SC095

Previous Versions

CA-Browser-Forum TLS BR 2.2.5 (redlined) – adopted by Ballot SC097

CA-Browser-Forum TLS BR 2.2.4 (redlined) – adopted by Ballot SC096

CA-Browser-Forum TLS BR 2.2.3 (redlined) – adopted by Ballot SC094

CA-Browser-Forum TLS BR 2.2.2 (redlined) – adopted by Ballot SC090

CA-Browser-Forum TLS BR 2.2.1 (redlined) – adopted by Ballot SC091

CA-Browser-Forum TLS BR 2.2.0 (redlined) – adopted by Ballot SC086v3

CA-Browser-Forum TLS BR 2.1.9 (redlined) – adopted by Ballot SC088v3

CA-Browser-Forum TLS BR 2.1.8 (redlined) – adopted by Ballot SC092

CA-Browser-Forum TLS BR 2.1.7 (redlined) – adopted by Ballot SC089

CA-Browser-Forum TLS BR 2.1.6 (redlined) – adopted by Ballot SC085v2

CA-Browser-Forum TLS BR 2.1.5 (redlined) – adopted by Ballot SC081v3

CA-Browser-Forum TLS BR 2.1.4 (redlined) – adopted by Ballot SC084

CA-Browser-Forum TLS BR 2.1.3 (redlined) – adopted by Ballot SC083

CA-Browser-Forum TLS BR 2.1.2 (redlined) – adopted by Ballot SC080

CA-Browser-Forum TLS BR 2.1.1 (redlined) – adopted by Ballot SC079

CA-Browser-Forum TLS BR 2.1.0 (redlined) – adopted by Ballot SC076

CA-Browser-Forum TLS BR 2.0.9 (redlined) – adopted by Ballot SC078

CA-Browser-Forum TLS BR 2.0.8 (redlined) – adopted by Ballot SC077

CA-Browser-Forum TLS BR 2.0.7 (redlined) – adopted by Ballot SC067

CA-Browser-Forum TLS BR 2.0.6 (redlined) – adopted by Ballot SC075

CA-Browser-Forum TLS BR 2.0.5 (redlined) – adopted by Ballot SC073

CA-Browser-Forum TLS BR 2.0.4 (redlined) – adopted by Ballot SC065

CA-Browser-Forum TLS BR 2.0.3 (redlined) – adopted by Ballot SC069

CA-Browser-Forum TLS BR 2.0.2 (redlined) – adopted by Ballot SC066

CA-Browser-Forum BR 2.0.1 (redlined) – adopted by Ballot SC063

CA-Browser-Forum BR 2.0.0 (redlined) – adopted by Ballot SC062

CA-Browser-Forum BR 1.8.7 (redlined) – adopted by Ballot SC061

CA-Browser-Forum BR 1.8.6 (redlined) – adopted by Ballot SC058

CA-Browser-Forum BR 1.8.5 (redlined) – adopted by Ballot SC056

CA-Browser-Forum BR 1.8.4 (redlined) – adopted by Ballot SC054

CA-Browser-Forum BR 1.8.3 (redlined) – adopted by Ballot SC051

CA-Browser-Forum BR 1.8.2 (redlined) – adopted by Ballot SC053

CA-Browser-Forum BR 1.8.1 (redlined) – adopted by Ballot SC050

CA-Browser-Forum BR 1.8.0 (redlined) – adopted by Ballot SC048

CA-Browser-Forum BR 1.7.9 (redlined) – adopted by Ballot SC047

CA-Browser-Forum BR 1.7.8 (redlined) – adopted by Ballot SC045

CA-Browser-Forum BR 1.7.7 (redlined) – adopted by Ballot SC046

CA-Browser-Forum BR 1.7.6 (redlined) – adopted by Ballot SC044

CA-Browser-Forum BR 1.7.5 (redlined) – adopted by Ballot SC042

CA-Browser-Forum BR 1.7.4 (redlined) – adopted by Ballot SC041

CA-Browser Forum BR 1.7.3 (redlined) – adopted by Ballots SC028 and SC035

CA-Browser Forum BR 1.7.2 (redlined) – adopted by Ballot SC033

CA-Browser Forum BR 1.7.1 (redlined) – adopted by Ballots SC030 and SC031

CA-Browser Forum BR 1.7.0 (redlined) – adopted by Ballot SC026

CA-Browser Forum BR 1.6.9 (redlined) – adopted by Ballot SC027

CA-Browser Forum BR 1.6.8 (redlined) – adopted by Ballot SC025

CA-Browser Forum BR 1.6.7 (redlined) – adopted by Ballots SC023, SC024

CA-Browser Forum BR 1.6.6 (redlined) – adopted by Ballots SC019

CA-Browser Forum BR 1.6.5 (redlined) – adopted by Ballots SC016

CA-Browser Forum BR 1.6.4 (redlined) – adopted by Ballots SC014, SC015, SC007

CA-Browser Forum BR 1.6.3 (redlined) – adopted by Ballot SC013

CA-Browser Forum BR 1.6.2 (redlined) – adopted by Ballot SC012

CA-Browser Forum BR 1.6.1 (redlined) – adopted by Ballot SC006

CA-Browser Forum BR 1.6.0 (redlined) – adopted by Ballot 224

CA-Browser Forum BR 1.5.9 (redlined) – adopted by Ballot 223

CA-Browser Forum BR 1.5.8 (redlined) – adopted by Ballot 219

CA-Browser Forum BR 1.5.7 – (redlined) – adopted by Ballot 220

CA-Browser Forum BR 1.5.6 – (redlined) – adopted by Ballot 218

CA-Browser Forum BR 1.5.5 – (redlined) – adopted by Ballot 217

CA-Browser Forum BR 1.5.4 – (redlined) – adopted by Ballot 215

CA-Browser Forum BR 1.5.3 – (redlined) – adopted by Ballot 214

CA-Browser Forum BR 1.5.2 – (redlined) – adopted by Ballot 190

CA-Browser Forum BR 1.5.1 – (redlined) – adopted by Ballot 197

CA-Browser Forum BR 1.5.0 – (redlined) – adopted by Ballot 212

CA-Browser Forum BR 1.4.9 – (redlined) – adopted by Ballot 204

CA-Browser Forum BR 1.4.8 – (redlined) – adopted by Ballot 199

CA-Browser Forum BR 1.4.7 – (redlined) – adopted by Ballot 196

CA-Browser Forum BR 1.4.6 – (redlined) – adopted by Ballot 195

CA-Browser Forum BR 1.4.5 – (redlined) – adopted by Ballot 189

CA-Browser Forum BR 1.4.4 – (redlined) – adopted by Ballot 193 on 17-March-2017

CA-Browser Forum BR 1.4.3 – (redlined) – adopted by Ballot 187 on 3-March-2017

CA-Browser Forum BR 1.4.2 – (redlined) – adopted by Ballot 181 on 1-January-2017

CA-Browser Forum BR 1.4.1 – (redlined) – adopted by Ballot 175 on 7 Sept. 2016

CA-Browser Forum BR 1.4.0 – (redlined) – adopted by Ballot 173 on 28 July 2016

CA-Browser Forum BR 1.3.9 – (redlined) – adopted by Ballot 174 on 29 August 2016

CA-Browser Forum BR 1.3.8 – (redlined) – adopted by Ballot 169 on 5 August 2016

CA-Browser Forum BR 1.3.7 – (redlined) – adopted by Ballot 164 on 8 July 2016

CA-Browser Forum BR 1.3.6 – (redlined) – adopted by Ballot 171 on 1 July 2016

CA-Browser Forum BR 1.3.5 – (redlined) – adopted by Ballot 168 on 10 May 2016

CA-Browser Forum BR 1.3.4 – (redlined) – adopted by Ballot 162 on 15 March 2016

CA-Browser Forum BR 1.3.3 – (redlined) – adopted by Ballot 160 on 4 February 2016

CA-Browser Forum BR 1.3.2 – (redlined) – adopted by Ballot 156 on 3 December 2015

CA-Browser Forum BR 1.3.1 – (redlined) – adopted by Ballot 151 on 28 September 2015

CA-Browser Forum BR 1.3.0 – adopted by Ballot 146 on 16 April 2015

Conversion Table for RFC-3647-formatted version 1.3.0 and later

Baseline Requirements 1.2.5 – (redlined) – adopted by Ballot 148 on 2 April 2015

Baseline Requirements 1.2.4 – (redlined) – adopted by Ballot 144 on 18 Feb 2015

Baseline Requirements 1.2.3 – (redlined) – adopted by Ballot 135 on 16 October 2014

Baseline Requirements 1.2.2 – (redlined) – adopted by Ballot 134 on 16 October 2014

Baseline Requirements 1.2.1 – (redlined) – adopted by Ballot 118 on 16 October 2014

Baseline Requirements 1.2.0 – (redlined) – adopted by Ballot 125 on 14 October 2014

Baseline Requirements 1.1.9 – (redlined) – adopted by Ballot 129 on 4 August 2014

Baseline Requirements 1.1.8 – (redlined) – adopted on 5 June 2014

Baseline Requirements 1.1.7 – (redlined) – effective 3 April 2014

Baseline Requirements 1.1.6 – (redlined) – effective 29 July, 2013

Baseline Requirements 1.1.5 – (redlined) – effective 31 May, 2013

Baseline Requirements 1.1.4 – (redlined) – effective 3 May, 2013

Baseline Requirements 1.1.3 – (redlined) – effective 21 February, 2013

Baseline Requirements 1.1 – effective 14 September, 2012

Baseline Requirements 1.1_日本語訳 (translated into Japanese) Baseline Requirements 1 – adopted on 22 Nov. 2011 with an Effective Date of 1 July 2012

Baseline Errata 1

Public Discussion Drafts

Baseline Requirements Draft 50

Baseline Requirements Draft 35

Baseline Requirements Draft 34

Baseline Requirements Draft 30b

Baseline Requirements
Latest releases
Server Certificate Requirements
SC095v3: Clean-up 2025 - Apr 2, 2026

Code Signing Requirements
v3.8 - Aug 5, 2024

What’s Changed CSC-25: Import EV Guidelines to CS Baseline Requirements by @dzacharo in https://github.com/cabforum/code-signing/pull/38 Full Changelog: https://github.com/cabforum/code-signing/compare/v3.7...v3.8

S/MIME Requirements
v1.0.13 - Ballot SMC015v2 - Mar 28, 2026

This ballot introduces requirements that a CA or RA must follow to rely upon a Mobile Drivers License (mDL) to provide evidence for the authentication of individual identity. It allows the use of mDL that conform to ISO/IEC 18013-5 and which may be verified by the CA or RA in conformance with ISO/IEC 18013-7. The CA or RA shall only accept mDL from an Issuing Authority that is legally authorized by the relevant government or jurisdiction to issue driving licenses. The draft also aligns the subsections of 3.2.4.2 (Validation of individual identity) to correspond more closely with those in 3.2.4.1 (Attribute collection of individual identity). It also includes minor editorial corrections. SMC015v2 was updated to remove an additional reference to the superceded ETSI EN 319 403. This ballot is proposed by Stephen Davidson (DigiCert) and endorsed by Ben Wilson (Mozilla) and Scott Rea (eMudhra).

Network and Certificate System Security Requirements
Version 2.0.5 (Ballot NS-008) - Jul 9, 2025

Edit this page
The Certification Authority Browser Forum (CA/Browser Forum) is a voluntary gathering of Certificate Issuers and suppliers of Internet browser software and other applications that use certificates (Certificate Consumers).