<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
HARICA votes "yes" to ballot CSC-12.<br>
<br>
<div class="moz-cite-prefix">On 26/10/2021 5:01 μ.μ., Corey Bonnell
via Cscwg-public wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0100017cbce7fed1-2040cdee-41b7-40d3-a85d-7f6ae05ef87f-000000@email.amazonses.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:"Calibri Light";
panose-1:2 15 3 2 2 2 4 3 2 4;}@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}@font-face
{font-family:"MS PGothic";
panose-1:2 11 6 0 7 2 5 8 2 4;}@font-face
{font-family:"\@MS PGothic";}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
margin-top:12.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
line-height:105%;
page-break-after:avoid;
font-size:16.0pt;
font-family:"Calibri Light",sans-serif;
color:#2F5496;
font-weight:normal;}h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
margin-top:2.0pt;
margin-right:0in;
margin-bottom:0in;
margin-left:0in;
line-height:105%;
page-break-after:avoid;
font-size:13.0pt;
font-family:"Calibri Light",sans-serif;
color:#2F5496;
font-weight:normal;}p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:.5in;
mso-add-space:auto;
line-height:105%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Calibri Light",sans-serif;
color:#2F5496;}span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri Light",sans-serif;
color:#2F5496;}span.EmailStyle21
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}div.WordSection1
{page:WordSection1;}ol
{margin-bottom:0in;}ul
{margin-bottom:0in;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<h1>CRL Revocation Date Clarification<o:p></o:p></h1>
<p class="MsoNormal"><o:p> </o:p></p>
<h2>Purpose of this ballot:<o:p></o:p></h2>
<p class="MsoNormal">While RFC 5280, section 5.3.2 specifies
that it is best practice to include the Invalidity Date CRL
entry extension to denote when a certificate first became
invalid, Certificate Consumer software commonly ignores this
extension in favor of using the time encoded in the CRL entry
revocationDate field for this purpose. This ballot clarifies
that CAs shall use the revocationDate to denote when a
certificate first became invalid even if that time precedes
issuance of the latest CRL. Additionally, this ballot
clarifies that if the CA is becomes aware of a more
appropriate revocation date for a revoked Code Signing
Certificate, then the CA may include this date in subsequently
issued CRLs and OCSP responses pertaining to that revoked Code
Signing Certificate.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The following motion has been proposed by
Corey Bonnell of DigiCert and endorsed by Rob Stradling of
Sectigo and Bruce Morton of Entrust.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<h2>MOTION BEGINS<o:p></o:p></h2>
<p class="MsoNormal">This ballot updates the <span
style="font-family:"Yu Gothic",sans-serif"
lang="JA">“</span>Baseline Requirements for the Issuance and
Management of Publicly<span style="font-family:"Yu
Gothic",sans-serif" lang="JA">‐</span>Trusted Code
Signing Certificates” version 2.5 according to the attached
redline which includes:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraphCxSpFirst"
style="margin-left:0in;mso-add-space:auto;mso-list:l1 level1
lfo3">Add the effective date of the CRL profile change in
section 1.3.<o:p></o:p></li>
<li class="MsoListParagraphCxSpMiddle"
style="margin-left:0in;mso-add-space:auto;mso-list:l1 level1
lfo3">Modification of the third paragraph of section 13.2.1.<o:p></o:p></li>
<li class="MsoListParagraphCxSpMiddle"
style="margin-left:0in;mso-add-space:auto;mso-list:l1 level1
lfo3">Addition of two paragraphs after the third paragraph
of section 13.2.1.<o:p></o:p></li>
<li class="MsoListParagraphCxSpLast"
style="margin-left:0in;mso-add-space:auto;mso-list:l1 level1
lfo3">Add explanatory footnote to the bottom of the last
page of section 13.2.1.<o:p></o:p></li>
</ul>
<h2>MOTION ENDS<o:p></o:p></h2>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The procedure for approval of this ballot
is as follows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Discussion (7+ days) <o:p></o:p></p>
<p class="MsoNormal">Start Time: 2021-10-19 14:00 UTC<o:p></o:p></p>
<p class="MsoNormal">End Time: 2021-10-26 14:00 UTC<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Vote for approval (7 days) <o:p></o:p></p>
<p class="MsoNormal">Start Time: 2021-10-26 14:00 UTC<o:p></o:p></p>
<p class="MsoNormal">End Time: 2021-11-02 14:00 UTC<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Cscwg-public mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Cscwg-public@cabforum.org">Cscwg-public@cabforum.org</a>
<a class="moz-txt-link-freetext" href="https://lists.cabforum.org/mailman/listinfo/cscwg-public">https://lists.cabforum.org/mailman/listinfo/cscwg-public</a>
</pre>
</blockquote>
<br>
</body>
</html>