<p style="font-stretch: normal; line-height: 1.5; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; margin: 0px;"><font color="#000000" face="Lucida Grande, Lucida Sans Unicode, sans-serif"><span style="caret-color: rgb(0, 0, 0); font-size: 14px;">CFCA votes “yes" on SC-063 v4.</span></font></p><p style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-stretch: normal; line-height: 1.5; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; margin: 0px;"><span style="font-family: "Lucida Grande", "Lucida Sans Unicode", sans-serif; font-size: 14px;"><br></span></p><p style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Lucida Grande", "Lucida Sans Unicode", sans-serif; font-size: 14px; font-stretch: normal; line-height: 1.5; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; margin: 0px;"><font color="#000000" face="Lucida Grande, Lucida Sans Unicode, sans-serif">Thanks,</font></p><p style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Lucida Grande", "Lucida Sans Unicode", sans-serif; font-size: 14px; font-stretch: normal; line-height: 1.5; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; margin: 0px;"><font color="#000000" face="Lucida Grande, Lucida Sans Unicode, sans-serif"><br></font></p><p style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: "Lucida Grande", "Lucida Sans Unicode", sans-serif; font-size: 14px; font-stretch: normal; line-height: 1.5; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; margin: 0px;"><font color="#000000" face="Lucida Grande, Lucida Sans Unicode, sans-serif">Gao Fei</font></p><p style="font-style: normal; font-variant-caps: normal; font-stretch: normal; line-height: 1.5; font-size-adjust: none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: normal; font-feature-settings: normal; font-optical-sizing: auto; font-variation-settings: normal; margin: 0px;"><br class="Apple-interchange-newline" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"></p><br><div id="foxmail_editor_signature"><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="420" style="width: 315pt;"><tbody><tr><td width="420" style="width: 315pt; padding: 0cm 0cm 3.75pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 宋体;"><b><span style="font-size: 15pt; font-family: "微软雅黑 Light", sans-serif; color: rgb(51, 102, 204);">高飞 技术部 电子认证产品团队主管</span></b></p></td></tr></tbody></table><p class="MsoNormal" style="font-size: 12pt; margin: 0cm 0cm 0.0001pt; font-family: 宋体;"></p><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="420" style="width: 315pt;"><tbody><tr><td width="100%" style="width: 420px; border-style: none none solid; border-bottom-width: 1pt; border-bottom-color: rgb(51, 102, 204); padding: 0cm 0cm 3.75pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 宋体; line-height: 16.5pt;"><span style="color: rgb(51, 102, 204);">电话：<span lang="EN-US">010-80864683 <br></span>手机：<span lang="EN-US">15320099563<o:p></o:p></span></span></p></td></tr></tbody></table><p class="MsoNormal" style="font-size: 12pt; margin: 0cm 0cm 0.0001pt; font-family: 宋体;"></p><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="420" style="width: 315pt;"><tbody><tr style="height: 19.5pt;"><td width="303" style="width: 227.25pt; padding: 11.25pt 0cm 7.5pt; height: 19.5pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 宋体;"><span lang="EN-US"><img width="303" height="26" id="_x0000_i1025" src="http://img.cebnet.com.cn/20170203/102361221.jpg" modifysize="100%"><o:p></o:p></span></p></td></tr></tbody></table><p class="MsoNormal" style="font-size: 12pt; margin: 0cm 0cm 0.0001pt; font-family: 宋体;"></p><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="540" style="width: 405pt;"><tbody><tr style="height: 90pt;"><td width="120" style="width: 90pt; border: 1pt solid rgb(204, 204, 204); padding: 0cm; height: 90pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 宋体;"><span lang="EN-US"><img width="120" height="120" id="_x0000_i1026" src="http://img.cebnet.com.cn/20170203/102361220.jpg" modifysize="100%"><o:p></o:p></span></p></td><td style="padding: 0cm; height: 90pt;"><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="450" style="width: 337.5pt;"><tbody><tr><td width="450" style="width: 337.5pt; padding: 0cm 0cm 0cm 7.5pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 宋体; line-height: 18pt;"><span style="font-family: "微软雅黑 Light", sans-serif; color: rgb(102, 102, 102);">地址：北京市西城区金融大街37号百盛北楼8层</span><span style="font-family: "微软雅黑 Light", sans-serif; color: rgb(102, 102, 102);"><span lang="EN-US"><br></span>邮编：<span lang="EN-US">100031<br></span>客服电话：<span lang="EN-US">400-880-9888<br></span>公司官网：<span lang="EN-US"><a href="http://www.cfca.com.cn/" title="http://www.cfca.com.cn" style="color: purple; -webkit-user-drag: none;"><span style="color: rgb(19, 109, 186); text-decoration: none;">http://www.cfca.com.cn</span></a><br></span>中国电子银行网：<span lang="EN-US"><a href="http://www.cebnet.com.cn/" title="http://www.cebnet.com.cn" style="color: purple; -webkit-user-drag: none;"><span style="color: rgb(19, 109, 186); text-decoration: none;">http://www.cebnet.com.cn</span></a><o:p></o:p></span></span></p></td></tr></tbody></table></td></tr></tbody></table><p class="MsoNormal" style="font-size: 12pt; margin: 0cm 0cm 0.0001pt; font-family: 宋体;"></p><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody><tr><td style="padding: 7.5pt 0cm 0cm;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: 宋体;"><span style="font-size: 9pt; color: rgb(153, 153, 153);">此邮件及附件包含商业秘密，受法律保护，未经许可不得泄露。<span lang="EN-US"><o:p></o:p></span></span></p></td></tr></tbody></table></div><span style="font: 14px/1.5 'Lucida Grande';color:#333;"><br></span><div class="foxmail_blockquote_fromhere_element" style="font: 12px/1.5 'Lucida Grande';padding:2px 0 2px 0;"> </div><div style="border-left: solid 3px #EAEAEA; padding-left: 10px"><div style="font: 12px/1.5 'PingFangSC-Regular';color:#70727B;">在 2023年7月6日 23:59，Ryan Dickson via Servercert-wg<servercert-wg@cabforum.org> 写道：</div><br><div class="mail_quote_9609745C8FF44163892BFD51A96E51F1" style="font: 14px/1.5 'Lucida Grande';color:#333;"><div dir="ltr"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-weight:700">Purpose of Ballot SC-063</span></p><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);vertical-align:baseline">This Ballot proposes updates to the </span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);font-style:italic;vertical-align:baseline">Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);vertical-align:baseline"> related to making Online Certificate Status Protocol (OCSP) services </span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);text-decoration-line:underline;vertical-align:baseline">optional</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);vertical-align:baseline"> for CAs. This proposal does </span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);text-decoration-line:underline;vertical-align:baseline">not</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);vertical-align:baseline"> prohibit or otherwise restrict CAs who choose to continue supporting OCSP from doing so. If CAs continue supporting OCSP, the </span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);text-decoration-line:underline;vertical-align:baseline">same</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;color:rgb(0,0,0);vertical-align:baseline"> requirements apply as they exist today.</span></p><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:10pt"><span style="color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Additionally, this proposal introduces changes related to CRL requirements including:</span></p><ul style="font-family:arial,sans-serif;margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">CRLs must conform with the proposed profile.</span></p></li><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">CAs must generate and publish either:</span></p></li><ul style="margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:circle;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">a full and complete, or </span></p></li><li dir="ltr" style="list-style-type:circle;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">a set of partitioned CRLs (sometimes called “sharded” CRLs), that when aggregated, represent the equivalent of a full and complete CRL.</span></p></li></ul><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">CAs issuing Subscriber Certificates must update and publish a new CRL…</span></p></li><ul style="margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:circle;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">within twenty-four (24) hours after recording a Certificate as revoked; and </span></p></li><li dir="ltr" style="list-style-type:circle;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Otherwise: </span></p></li><ul style="margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:square;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">at least every seven (7) days if all Certificates include an Authority Information Access extension with an id-ad-ocsp accessMethod (“AIA OCSP pointer”), or</span></p></li><li dir="ltr" style="list-style-type:square;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">at least every four (4) days in all other cases.</span></p></li></ul></ul></ul><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:10pt"><span style="color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Finally, the proposal revisits the concept of a “short-lived” certificate, introduced in </span><a href="https://cabforum.org/2015/11/11/ballot-153-short-lived-certificates/" style="text-decoration-line:none" target="_blank"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">Ballot 153</span></a><span style="color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">. As described in this ballot, short-lived certificates (sometimes called “short-term certificates” in ETSI </span><a href="https://www.etsi.org/deliver/etsi_en/319400_319499/31941201/01.04.04_60/en_31941201v010404p.pdf" style="text-decoration-line:none" target="_blank"><span style="color:rgb(74,110,224);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">specifications</span></a><span style="color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">) are:</span></p><ul style="font-family:arial,sans-serif;margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">optional</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">. CAs will </span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">not</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> be required to issue short-lived certificates. For TLS certificates that do not meet the definition of a short-lived certificate introduced in this proposed update, the current maximum validity period of 398 days remains applicable. </span></p></li></ul><ul style="font-family:arial,sans-serif;margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">constrained to an initial maximum validity period of ten (10) days.</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> The proposal stipulates that short-lived certificates issued on or after 15 March 2026 must not have a Validity Period greater than seven (7) days.</span></p></li></ul><ul style="font-family:arial,sans-serif;margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">not required to contain a CRLDP or OCSP pointer and are not required to be revoked</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">. The primary mechanism of certificate invalidation for these short-lived certificates would be through certificate expiry. CAs may </span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">optionally</span><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> revoke short-lived certificates. The initial maximum certificate validity is aligned with the existing maximum values for CRL “nextUpdate” and OCSP response validity allowed by the BRs today. </span></p></li></ul><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Additional background, justification, and considerations are outlined </span><a href="https://docs.google.com/document/d/180T6cDSWPy54Rb5d6R4zN7MuLEMShaZ4IRLQgdPqE98/edit" style="text-decoration-line:none" target="_blank"><span style="color:rgb(74,110,224);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">here</span></a><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">.</span></p><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:10pt"><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">Proposal Revision History:</span></p><ul style="font-family:arial,sans-serif;margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">The set of updates resulting from the first round of discussion are presented</span><a href="https://github.com/ryancdickson/staging/pull/3/files" style="text-decoration-line:none" target="_blank"><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">here</span></a><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">.</span></p></li><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">The set of updates resulting from the second round of discussion are presented </span><a href="https://github.com/ryancdickson/staging/pull/5/files" style="text-decoration-line:none" target="_blank"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">here</span></a><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">.</span></p></li><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">The set of updates resulting from the third round of discussion are presented </span><a href="https://github.com/ryancdickson/staging/pull/7/files" style="text-decoration-line:none" target="_blank"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">here</span></a><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">. </span></p></li></ul><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">The following motion has been proposed by Ryan Dickson and Chris Clements of Google (Chrome Root Program) and endorsed by </span><span style="color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Kiran Tummala</span><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> of Microsoft and </span><span style="color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Tim Callan</span><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> of Sectigo.</span></p><br style="font-family:arial,sans-serif"><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">— Motion Begins —</span></p><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” (“Baseline Requirements”), based on Version 2.0.0.</span></p><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">MODIFY the Baseline Requirements as specified in the following Redline: </span></p><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><a href="https://github.com/cabforum/servercert/compare/a0360b61e73476959220dc328e3b68d0224fa0b3..b8a0453e59ff342779d5083f2f1f8b8b5930a66a" style="text-decoration-line:none" target="_blank"><span style="background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/cabforum/servercert/compare/a0360b61e73476959220dc328e3b68d0224fa0b3..b8a0453e59ff342779d5083f2f1f8b8b5930a66a</span></a><span style="color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> </span></p><br style="font-family:arial,sans-serif"><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">— Motion Ends —</span></p><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:</span></p><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Discussion (13+ days)</span></p><ul style="font-family:arial,sans-serif;margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap;margin-left:11pt"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Start time: 2023-06-22 20:30:00 UTC</span></p></li><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap;margin-left:11pt"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">End time: 2023-07-06 15:59:59 UTC</span></p></li></ul><br style="font-family:arial,sans-serif"><p dir="ltr" style="font-family:arial,sans-serif;line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Vote for approval (7 days)</span></p><ul style="font-family:arial,sans-serif;margin-top:0px;margin-bottom:0px"><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap;margin-left:11pt"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Start time: 2023-07-06 16:00:00 UTC</span></p></li><li dir="ltr" style="list-style-type:disc;color:rgb(0,0,0);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap;margin-left:11pt"><p dir="ltr" role="presentation" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">End time: 2023-07-13 16:00:00 UTC</span></p></li></ul></div>
</div></div>