<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<p class="elementToProof" style="text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;">
Certum votes YES on Ballot CSC-26</p>
<p style="text-align: left; text-indent: 0px; margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;">
<br>
</p>
<p style="margin: 0px; font-family: Aptos; font-size: 11pt;">Kind regards,</p>
<p style="margin: 0px; font-family: Aptos; font-size: 11pt;">Kateryna Aleksieieva</p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;"> </p>
<div style="padding: 3pt 0cm 0cm; border-top: 1pt solid rgb(225, 225, 225);">
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;"><span style="font-family: Calibri, sans-serif;"><b>De:</b> Cscwg-public <cscwg-public-bounces@cabforum.org>
<b>En nombre de </b>Martijn Katerbarg via Cscwg-public<br>
<b>Enviado el:</b> jueves, 20 de junio de 2024 18:31<br>
<b>Para:</b> cscwg-public@cabforum.org<br>
<b>Asunto:</b> [Cscwg-public] [Voting Period Begins] CSC-26 Timestamping Private Key Protection</span></p>
</div>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;"> </p>
<div style="padding: 2pt; border-width: 1pt; border-style: solid; border-color: black;">
<p style="line-height: 12pt; background-color: rgb(250, 250, 3); margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;">
<span style="font-family: Calibri, sans-serif; font-size: 10pt; color: black;">CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.</span></p>
</div>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;"><span style="font-family: "MS PGothic", sans-serif; font-size: 12pt;"> </span></p>
<p><span style="font-family: Aptos, sans-serif; color: rgb(33, 33, 33);"><b>Purpose of the Ballot</b></span></p>
<p style="text-align: left; margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;">
<span style="color: rgb(33, 33, 33);">This ballot updates the $B!H(BBaseline Requirements for the Issuance and Management of Publicly</span><span style="font-family: "Cambria Math", serif; color: rgb(33, 33, 33);">$B!>(B</span><span style="color: rgb(33, 33, 33);">Trusted
Code Signing Certificates$B!H(B version 3.7 in order to clarify language regarding Timestamp Authority Private Key Protection. The main goals of this ballot are to:</span></p>
<ol start="1" style="margin-bottom: 0cm;">
<li style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(33, 33, 33); margin-right: 0cm; margin-left: 0cm;">
<span style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33);">Require Timestamp Authority Subordinate CA Private Keys to be stored in offline HSMs</span></li><li style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(33, 33, 33); margin-right: 0cm; margin-left: 0cm;">
<span style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33);">Add a requirement to remove Private Keys associated with Timestamp Certificates after a 18 months</span></li><li style="font-family: Aptos, sans-serif; font-size: 12pt; color: rgb(33, 33, 33); margin-right: 0cm; margin-left: 0cm;">
<span style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33);">Add a requirement to reject SHA-1 timestamp requests</span></li></ol>
<p style="text-align: left; margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;">
<span style="color: rgb(33, 33, 33);">The following motion has been proposed by Martijn Katerbarg of Sectigo and endorsed by Bruce Morton of Entrust and Ian McMillan of Microsoft.</span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;"><span style="color: rgb(33, 33, 33);"> </span></p>
<p style="text-align: left; margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;">
<span style="color: rgb(33, 33, 33);"><b>MOTION BEGINS</b></span></p>
<p style="text-align: left; margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;">
<span style="color: rgb(33, 33, 33);"> </span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;"><span style="color: rgb(33, 33, 33);">This ballot updates the $B!H(BBaseline Requirements for the Issuance and Management of Publicly</span><span style="font-family: "Cambria Math", serif; color: rgb(33, 33, 33);">$B!>(B</span><span style="color: rgb(33, 33, 33);">Trusted
Code Signing Certificates$B!I(B ("Code Signing Baseline Requirements") based on version 3.7. MODIFY the Code Signing Baseline Requirements as specified in the following redline:
</span><span style="color: rgb(0, 120, 215);"><u><a href="https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...12130ff7c2b41d795d47925c084780ea0f7328cd" id="OWA44b4395f-f802-39a2-5a39-d2fb7e6d9fc8" class="OWAAutoLink" title="Original URL:
https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...12130ff7c2b41d795d47925c084780ea0f7328cd
Click to follow link." shash="o1Onhg/vrUiI+bhT+O9NKGMdBH4IuzGeXZzAfMQIymIdBfU2nCJncKJALTvhsgvzkXXQIgJAxefKS7Xa8DtdGIs+zAXuz76HBVhvPRiLJ6hU+nYmRs/cJDgqstZF2QFfPkUHgHbR0oIptJHvFpdEHdHphWv1s+vBcUnyNoubFWI=" originalsrc="https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...12130ff7c2b41d795d47925c084780ea0f7328cd" data-auth="Verified" style="color: rgb(0, 120, 215); margin-top: 0px; margin-bottom: 0px;">https://github.com/cabforum/code-signing/compare/d431d9104094f2b89f35ed4bf1d64b9a844e762b...12130ff7c2b41d795d47925c084780ea0f7328cd</a></u></span></p>
<p style="text-align: left;"><span style="font-family: Aptos, sans-serif; color: rgb(33, 33, 33);"><b>MOTION ENDS</b></span></p>
<p style="text-align: left; margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;">
<span style="color: rgb(33, 33, 33);">The procedure for this ballot is as follows:</span></p>
<p style="text-align: left;"><span style="color: rgb(33, 33, 33);">Discussion (7 days)</span></p>
<ul style="text-align: left; margin-top: 0cm; margin-bottom: 0cm;">
<li style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33); margin: 0cm;">
<span style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33);">Start Time: 2024-06-13 16:30 UTC</span></li><li style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33); margin: 0cm;">
<span style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33);">End Time: 2024-06-20 16:30 UTC</span></li></ul>
<p style="text-align: left;"><span style="color: rgb(33, 33, 33);">Vote for approval (7 days)</span></p>
<ul style="text-align: left; margin-top: 0cm; margin-bottom: 0cm;">
<li style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33); margin: 0cm;">
<span style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33);">Start Time: 2024-06-20 16:30 UTC</span></li><li style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33); margin: 0cm;">
<span style="font-family: Aptos, sans-serif; font-size: 11pt; color: rgb(33, 33, 33);">End Time: 2024-06-27 16:30 UTC</span></li></ul>
<p style="text-align: left; margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;">
<span style="color: rgb(33, 33, 33);"> </span></p>
<p style="margin: 0cm; font-family: Aptos, sans-serif; font-size: 11pt;"> </p>
</body>
</html>