<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Hi Corey,</span></div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">1> </span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">My initial proposal stated
"__Deprecated__ discouraged until prohibited.". This was to align with the current use of deprecated in `subject:commonName` and to make it clear we are encouraging CAs to stop using the OU rather sooner than later. Stating
</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">optional instead of d</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">eprecated would
not </span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">encouraging CAs to stop using the OU when possible</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">.</span></div>
<div style=""><span style="display: inline !important;"><span></span></span></div>
<div style=""><br>
</div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Personally, I think it's clear enough, but if others agree, I'm ok to change this to optional or add the suffix back as in the original proposal.</span></div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">2> Thanks for bringing this up, I was not aware that CAs where still doing this. I would like to prevent adding more sunset dates, does anyone
see this<span style="font-family:Calibri, sans-serif;font-size:14.6667px;text-align:left;background-color:rgb(255, 255, 255);display:inline !important"><span> </span>immediate prohibition of OU in DV certificates as a problem?</span></span></div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div style=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Paul</span></div>
<div>
<div><br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0);">
<br>
<hr tabindex="-1" style="display:inline-block; width:98%;">
<b>From:</b> Corey Bonnell<br>
<b>Sent:</b> Tuesday, June 15, 2021 19:36<br>
<b>To:</b> Paul van Brouwershaven; CA/B Forum Server Certificate WG Public Discussion List<br>
<b>Subject:</b> [EXTERNAL] RE: Discussion Period Begins on Ballot SC47v2: Sunset subject:organizationalUnitName
<div><br>
</div>
</div>
<div class="rps_74be">
<div lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">WARNING: This email originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.<br>
<hr>
<div class="x_WordSection1">
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Hi Paul,</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Thanks for sending this proposal out. I have two comments on the proposed language:</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<ol type="1" style="margin-bottom: 0in;margin-top:0in">
<li class="x_MsoListParagraph" style="margin: 0in 0in 0in 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;margin-left:0in">
Although the current proposed wording aligns with how Common Name is defined, stating “Deprecated” doesn’t indicate whether the OU is required or optional until the prohibition date. I think it is clearer to state “Optional, but Deprecated” or something to
that effect.</li><li class="x_MsoListParagraph" style="margin: 0in 0in 0in 0.5in; font-size: 11pt; font-family: Calibri, sans-serif;margin-left:0in">
There is at least one CA that is still actively issuing DV certificates with OU, and this inclusion of the OU field was permitted by at least one Root Program. The current wording of the proposal would implement an immediate prohibition on this practice once
the ballot clears IPR. I don’t feel strongly about the timeline for this prohibition, but did want to call it out in case this is was unintended.</li></ol>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Thanks,</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
Corey</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<b>From:</b> Servercert-wg <servercert-wg-bounces@cabforum.org> <b>On Behalf Of </b>
Paul van Brouwershaven via Servercert-wg<br>
<b>Sent:</b> Monday, June 14, 2021 4:43 AM<br>
<b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org>; Paul van Brouwershaven <Paul.vanBrouwershaven@entrust.com><br>
<b>Subject:</b> Re: [Servercert-wg] Discussion Period Begins on Ballot SC47v2: Sunset subject:organizationalUnitName</p>
</div>
</div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black">Please note the link to the redline is showing the correct version but is linking to the previous version.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black">The correct link as shown: (commit 160f860dc1eccaa273bc8001dadaf07c4bba9dbd)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black"><a href="https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable">https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd</a></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black">The pull request is also show tot actual changes.</span></p>
</div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<div class="x_MsoNormal" align="center" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="x_divRplyFwdMsg">
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<b><span style="color:black">From:</span></b><span style="color:black"> Servercert-wg <<a href="mailto:servercert-wg-bounces@cabforum.org" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable">servercert-wg-bounces@cabforum.org</a>> on behalf
of Paul van Brouwershaven via Servercert-wg <<a href="mailto:servercert-wg@cabforum.org" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable">servercert-wg@cabforum.org</a>><br>
<b>Sent:</b> Monday, June 14, 2021 09:51<br>
<b>To:</b> CA/B Forum Server Certificate WG Public Discussion List <<a href="mailto:servercert-wg@cabforum.org" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable">servercert-wg@cabforum.org</a>><br>
<b>Subject:</b> [EXTERNAL] [Servercert-wg] Discussion Period Begins on Ballot SC47v2: Sunset subject:organizationalUnitName</span>
</p>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
</div>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
WARNING: This email originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.</p>
<div class="x_MsoNormal" align="center" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;text-align:center">
<hr size="2" width="100%" align="center">
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black">This email begins the discussion period for Ballot SC47v2: Sunset subject:organizationalUnitName</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black">This version updates SC47 to state "issued on or after September 1, 2022" and makes the EV Guidelines reference the BRs as suggested by Ryan Sleevi from Google.</span></p>
</div>
<div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">Purpose of Ballot:</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">This Ballot sets a sunset date for the `subject:organizationalUnitName` as several earlier attempts to strengthen the validation failed to gain consensus.</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">The following motion has been proposed by Paul van Brouwershaven of Entrust and endorsed by Ben Wilson of Mozilla and Chema Lopez of Firmaprofesional.</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">It can be viewed on GitHub as <a href="https://urldefense.com/v3/__https:/github.com/cabforum/servercert/pull/282__;!!FJ-Y8qCqXTj2!In1_62JB1hlJhP3yHrH8xFv_eCLNnwhczsBSH4EDm_GfhdDT2YslHfzfkaOYowuG40l585ghaA$" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable">https://github.com/cabforum/servercert/pull/282</a></span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">===== MOTION BEGINS =====</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” (“Baseline Requirements”), based on Version 1.7.6:</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">MODIFY the Baseline Requirements as specified in the following Redline:</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<a href="https://urldefense.com/v3/__https:/github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...a70e85f256ee01fbfc6625f667305b4e3fb7fee9__;!!FJ-Y8qCqXTj2!In1_62JB1hlJhP3yHrH8xFv_eCLNnwhczsBSH4EDm_GfhdDT2YslHfzfkaOYowuG40neKQZkDA$" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable"><span style="font-size:12.0pt; color:black">https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd</span></a></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">This ballot modifies the “Guidelines for the Issuance and Management of Extended Validation Certificates” (“EV Guidelines”) as follows, based on Version 1.7.6:</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">MODIFY the EV Guidelines as defined in the following redline:</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<a href="https://urldefense.com/v3/__https:/github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...a70e85f256ee01fbfc6625f667305b4e3fb7fee9__;!!FJ-Y8qCqXTj2!In1_62JB1hlJhP3yHrH8xFv_eCLNnwhczsBSH4EDm_GfhdDT2YslHfzfkaOYowuG40neKQZkDA$" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable"><span style="font-size:12.0pt; color:black">https://github.com/cabforum/servercert/compare/cf4e17a43977dcf7cb9c9e41efd2df4be4707e13...160f860dc1eccaa273bc8001dadaf07c4bba9dbd</span></a></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">===== MOTION ENDS =====</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">This ballot proposes a Final Maintenance Guideline.</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">The procedure for approval of this ballot is as follows:</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">Discussion (7+ days)</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">Start Time: 2021-06-14 8:00:00 UTC </span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">End Time: 2021-06-21 8:00:00 UTC </span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">Vote for approval (7 days)</span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:11.5pt; color:#201F1E"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;background:white">
<span style="font-size:12.0pt; color:black">Start Time: TBD </span><span style="font-size:11.5pt; color:#201F1E"></span></p>
</div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
<span style="font-size:12.0pt; color:black; background:white">End Time: TBD </span></p>
</div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>