<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1846895661;
mso-list-type:hybrid;
mso-list-template-ids:-612571910 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>Hi Paul,<o:p></o:p></p><p class=MsoNormal>Thanks for sending this proposal out. I have two comments on the proposed language:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><ol style='margin-top:0in' start=1 type=1><li class=MsoListParagraph style='margin-left:0in;mso-list:l0 level1 lfo1'>Although the current proposed wording aligns with how Common Name is defined, stating “Deprecated” doesn’t indicate whether the OU is required or optional until the prohibition date. I think it is clearer to state “Optional, but Deprecated” or something to that effect.<o:p></o:p></li><li class=MsoListParagraph style='margin-left:0in;mso-list:l0 level1 lfo1'>There is at least one CA that is still actively issuing DV certificates with OU, and this inclusion of the OU field was permitted by at least one Root Program. The current wording of the proposal would implement an immediate prohibition on this practice once the ballot clears IPR. I don’t feel strongly about the timeline for this prohibition, but did want to call it out in case this is was unintended.<o:p></o:p></li></ol><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Thanks,<o:p></o:p></p><p class=MsoNormal>Corey<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Servercert-wg <servercert-wg-bounces@cabforum.org> <b>On Behalf Of </b>Paul van Brouwershaven via Servercert-wg<br><b>Sent:</b> Monday, June 14, 2021 4:43 AM<br><b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org>; Paul van Brouwershaven <Paul.vanBrouwershaven@entrust.com><br><b>Subject:</b> Re: [Servercert-wg] Discussion Period Begins on Ballot SC47v2: Sunset subject:organizationalUnitName<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Please note the link to the redline is showing the correct version but is linking to the previous version.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>The correct link as shown: (commit 160f860dc1eccaa273bc8001dadaf07c4bba9dbd)<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><a href="https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd">https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd</a><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>The pull request is also show tot actual changes.<o:p></o:p></span></p></div><p class=MsoNormal><o:p> </o:p></p><div class=MsoNormal align=center style='text-align:center'><hr size=2 width="98%" align=center></div><div id=divRplyFwdMsg><p class=MsoNormal><b><span style='color:black'>From:</span></b><span style='color:black'> Servercert-wg <<a href="mailto:servercert-wg-bounces@cabforum.org">servercert-wg-bounces@cabforum.org</a>> on behalf of Paul van Brouwershaven via Servercert-wg <<a href="mailto:servercert-wg@cabforum.org">servercert-wg@cabforum.org</a>><br><b>Sent:</b> Monday, June 14, 2021 09:51<br><b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <<a href="mailto:servercert-wg@cabforum.org">servercert-wg@cabforum.org</a>><br><b>Subject:</b> [EXTERNAL] [Servercert-wg] Discussion Period Begins on Ballot SC47v2: Sunset subject:organizationalUnitName</span> <o:p></o:p></p><div><p class=MsoNormal> <o:p></o:p></p></div></div><div><p class=MsoNormal>WARNING: This email originated outside of Entrust.<br>DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.<o:p></o:p></p><div class=MsoNormal align=center style='text-align:center'><hr size=2 width="100%" align=center></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>This email begins the discussion period for Ballot SC47v2: Sunset subject:organizationalUnitName</span><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><span style='font-size:12.0pt;color:black'>This version updates SC47 to state "issued on or after September 1, 2022" and makes the EV Guidelines reference the BRs as suggested by Ryan Sleevi from Google.</span><o:p></o:p></p></div><div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>Purpose of Ballot:</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>This Ballot sets a sunset date for the `subject:organizationalUnitName` as several earlier attempts to strengthen the validation failed to gain consensus.</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>The following motion has been proposed by Paul van Brouwershaven of Entrust and endorsed by Ben Wilson of Mozilla and Chema Lopez of Firmaprofesional.</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>It can be viewed on GitHub as <a href="https://urldefense.com/v3/__https:/github.com/cabforum/servercert/pull/282__;!!FJ-Y8qCqXTj2!In1_62JB1hlJhP3yHrH8xFv_eCLNnwhczsBSH4EDm_GfhdDT2YslHfzfkaOYowuG40l585ghaA$" target="_blank">https://github.com/cabforum/servercert/pull/282</a></span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>===== MOTION BEGINS =====</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” (“Baseline Requirements”), based on Version 1.7.6:</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>MODIFY the Baseline Requirements as specified in the following Redline:</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal><a href="https://urldefense.com/v3/__https:/github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...a70e85f256ee01fbfc6625f667305b4e3fb7fee9__;!!FJ-Y8qCqXTj2!In1_62JB1hlJhP3yHrH8xFv_eCLNnwhczsBSH4EDm_GfhdDT2YslHfzfkaOYowuG40neKQZkDA$" target="_blank"><span style='font-size:12.0pt;color:black'>https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd</span></a><o:p></o:p></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>This ballot modifies the “Guidelines for the Issuance and Management of Extended Validation Certificates” (“EV Guidelines”) as follows, based on Version 1.7.6:</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>MODIFY the EV Guidelines as defined in the following redline:</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal><a href="https://urldefense.com/v3/__https:/github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...a70e85f256ee01fbfc6625f667305b4e3fb7fee9__;!!FJ-Y8qCqXTj2!In1_62JB1hlJhP3yHrH8xFv_eCLNnwhczsBSH4EDm_GfhdDT2YslHfzfkaOYowuG40neKQZkDA$" target="_blank"><span style='font-size:12.0pt;color:black'>https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd</span></a><o:p></o:p></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>===== MOTION ENDS =====</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>This ballot proposes a Final Maintenance Guideline.</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>The procedure for approval of this ballot is as follows:</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>Discussion (7+ days)</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>Start Time: 2021-06-14 8:00:00 UTC </span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>End Time: 2021-06-21 8:00:00 UTC </span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>Vote for approval (7 days)</span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:11.5pt;color:#201F1E'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='background:white'><span style='font-size:12.0pt;color:black'>Start Time: TBD </span><span style='font-size:11.5pt;color:#201F1E'><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:12.0pt;color:black;background:white'>End Time: TBD </span><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div></div></body></html>