<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; font-weight: 400;">Entrust votes YES on Ballot SC-063 v4.</span><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Servercert-wg <servercert-wg-bounces@cabforum.org> on behalf of Ryan Dickson via Servercert-wg <servercert-wg@cabforum.org><br>
<b>Sent:</b> Thursday, July 6, 2023 17:59<br>
<b>To:</b> ServerCert CA/BF <servercert-wg@cabforum.org><br>
<b>Subject:</b> [EXTERNAL] [Servercert-wg] Voting Period Begins - Ballot SC-063 V4: “Make OCSP Optional, Require CRLs, and Incentivize Automation”</font>
<div> </div>
</div>
<div>WARNING: This email originated outside of Entrust.<br>
DO NOT CLICK links or attachments unless you trust the sender and know the content is safe.<br>
<hr>
<div dir="ltr">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-weight:700">Purpose of Ballot SC-063</span></p>
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); vertical-align:baseline">This Ballot proposes updates to the
</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); font-style:italic; vertical-align:baseline">Baseline Requirements for the Issuance and Management
of Publicly-Trusted Certificates</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); vertical-align:baseline"> related to making Online Certificate
Status Protocol (OCSP) services </span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); text-decoration-line:underline; vertical-align:baseline">optional</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); vertical-align:baseline">
for CAs. This proposal does </span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); text-decoration-line:underline; vertical-align:baseline">not</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); vertical-align:baseline">
prohibit or otherwise restrict CAs who choose to continue supporting OCSP from doing so. If CAs continue supporting OCSP, the
</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); text-decoration-line:underline; vertical-align:baseline">same</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; color:rgb(0,0,0); vertical-align:baseline">
requirements apply as they exist today.</span></p>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:10pt">
<span style="color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Additionally, this proposal introduces changes related to CRL requirements including:</span></p>
<ul style="font-family:arial,sans-serif; margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">CRLs must conform with the proposed profile.</span></p>
</li><li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">CAs must generate and publish either:</span></p>
</li><ul style="margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:circle; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">a full and complete, or </span></p>
</li><li dir="ltr" style="list-style-type:circle; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">a set of partitioned CRLs (sometimes called “sharded” CRLs), that when aggregated, represent the
equivalent of a full and complete CRL.</span></p>
</li></ul>
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">CAs issuing Subscriber Certificates must update and publish a new CRL…</span></p>
</li><ul style="margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:circle; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">within twenty-four (24) hours after recording a Certificate as revoked; and </span></p>
</li><li dir="ltr" style="list-style-type:circle; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Otherwise: </span></p>
</li><ul style="margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:square; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">at least every seven (7) days if all Certificates include an Authority Information Access extension
with an id-ad-ocsp accessMethod (“AIA OCSP pointer”), or</span></p>
</li><li dir="ltr" style="list-style-type:square; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">at least every four (4) days in all other cases.</span></p>
</li></ul>
</ul>
</ul>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:10pt">
<span style="color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Finally, the proposal revisits the concept of a “short-lived” certificate, introduced
in </span><a href="https://urldefense.com/v3/__https://cabforum.org/2015/11/11/ballot-153-short-lived-certificates/__;!!FJ-Y8qCqXTj2!fnnBqeHy_khyLpGNpX6_jeRMAO7x3OLIpxEIwfFk-ov4GnUZDfrNn7giWuTNB-iwuRxYSXrlt0J5cdxaH8W6j8wqjFDBczgzlHgi$" target="_blank" style="text-decoration-line:none"><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">Ballot
153</span></a><span style="color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">. As described in this ballot, short-lived certificates (sometimes
called “short-term certificates” in ETSI </span><a href="https://urldefense.com/v3/__https://www.etsi.org/deliver/etsi_en/319400_319499/31941201/01.04.04_60/en_31941201v010404p.pdf__;!!FJ-Y8qCqXTj2!fnnBqeHy_khyLpGNpX6_jeRMAO7x3OLIpxEIwfFk-ov4GnUZDfrNn7giWuTNB-iwuRxYSXrlt0J5cdxaH8W6j8wqjFDBc1D8EOJt$" target="_blank" style="text-decoration-line:none"><span style="color:rgb(74,110,224); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">specifications</span></a><span style="color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">)
are:</span></p>
<ul style="font-family:arial,sans-serif; margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-weight:700; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">optional</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">.
CAs will </span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">not</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">
be required to issue short-lived certificates. For TLS certificates that do not meet the definition of a short-lived certificate introduced in this proposed update, the current maximum validity period of 398 days remains applicable. </span></p>
</li></ul>
<ul style="font-family:arial,sans-serif; margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-weight:700; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">constrained to an initial maximum validity period of ten (10) days.</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">
The proposal stipulates that short-lived certificates issued on or after 15 March 2026 must not have a Validity Period greater than seven (7) days.</span></p>
</li></ul>
<ul style="font-family:arial,sans-serif; margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="background-color:transparent; font-weight:700; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">not required to contain a CRLDP or OCSP pointer and are not required to be revoked</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">.
The primary mechanism of certificate invalidation for these short-lived certificates would be through certificate expiry. CAs may
</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">optionally</span><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">
revoke short-lived certificates. The initial maximum certificate validity is aligned with the existing maximum values for CRL “nextUpdate” and OCSP response validity allowed by the BRs today. </span></p>
</li></ul>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Additional background, justification, and considerations are outlined
</span><a href="https://urldefense.com/v3/__https://docs.google.com/document/d/180T6cDSWPy54Rb5d6R4zN7MuLEMShaZ4IRLQgdPqE98/edit__;!!FJ-Y8qCqXTj2!fnnBqeHy_khyLpGNpX6_jeRMAO7x3OLIpxEIwfFk-ov4GnUZDfrNn7giWuTNB-iwuRxYSXrlt0J5cdxaH8W6j8wqjFDBczjbPAfj$" target="_blank" style="text-decoration-line:none"><span style="color:rgb(74,110,224); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">here</span></a><span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">.</span></p>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:10pt">
<span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">Proposal Revision History:</span></p>
<ul style="font-family:arial,sans-serif; margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">The set of updates resulting from the first round of discussion are presented</span><a href="https://urldefense.com/v3/__https://github.com/ryancdickson/staging/pull/3/files__;!!FJ-Y8qCqXTj2!fnnBqeHy_khyLpGNpX6_jeRMAO7x3OLIpxEIwfFk-ov4GnUZDfrNn7giWuTNB-iwuRxYSXrlt0J5cdxaH8W6j8wqjFDBc4UuOkH9$" target="_blank" style="text-decoration-line:none"><span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">
</span><span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">here</span></a><span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">.</span></p>
</li><li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">The set of updates resulting from the second round of discussion are presented
</span><a href="https://urldefense.com/v3/__https://github.com/ryancdickson/staging/pull/5/files__;!!FJ-Y8qCqXTj2!fnnBqeHy_khyLpGNpX6_jeRMAO7x3OLIpxEIwfFk-ov4GnUZDfrNn7giWuTNB-iwuRxYSXrlt0J5cdxaH8W6j8wqjFDBc_krYszU$" target="_blank" style="text-decoration-line:none"><span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">here</span></a><span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">.</span></p>
</li><li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">The set of updates resulting from the third round of discussion are presented
</span><a href="https://urldefense.com/v3/__https://github.com/ryancdickson/staging/pull/7/files__;!!FJ-Y8qCqXTj2!fnnBqeHy_khyLpGNpX6_jeRMAO7x3OLIpxEIwfFk-ov4GnUZDfrNn7giWuTNB-iwuRxYSXrlt0J5cdxaH8W6j8wqjFDBcyX5ABFH$" target="_blank" style="text-decoration-line:none"><span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">here</span></a><span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">. </span></p>
</li></ul>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">The following motion has been proposed by Ryan Dickson and Chris Clements of Google (Chrome Root Program) and
endorsed by </span><span style="color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Kiran Tummala</span><span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">
of Microsoft and </span><span style="color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Tim Callan</span><span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">
of Sectigo.</span></p>
<br style="font-family:arial,sans-serif">
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-weight:700; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">— Motion Begins —</span></p>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">This ballot modifies the “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates”
(“Baseline Requirements”), based on Version 2.0.0.</span></p>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">MODIFY the Baseline Requirements as specified in the following Redline: </span></p>
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<a href="https://urldefense.com/v3/__https://github.com/cabforum/servercert/compare/a0360b61e73476959220dc328e3b68d0224fa0b3..b8a0453e59ff342779d5083f2f1f8b8b5930a66a__;!!FJ-Y8qCqXTj2!fnnBqeHy_khyLpGNpX6_jeRMAO7x3OLIpxEIwfFk-ov4GnUZDfrNn7giWuTNB-iwuRxYSXrlt0J5cdxaH8W6j8wqjFDBc3nyWdDJ$" target="_blank" style="text-decoration-line:none"><span style="background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; text-decoration-line:underline; vertical-align:baseline">https://github.com/cabforum/servercert/compare/a0360b61e73476959220dc328e3b68d0224fa0b3..b8a0453e59ff342779d5083f2f1f8b8b5930a66a</span></a><span style="color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline"> </span></p>
<br style="font-family:arial,sans-serif">
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-weight:700; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">— Motion Ends —</span></p>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">This ballot proposes a Final Maintenance Guideline. The procedure for approval of this ballot is as follows:</span></p>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-weight:700; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Discussion (13+ days)</span></p>
<ul style="font-family:arial,sans-serif; margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap; margin-left:11pt">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Start time: 2023-06-22 20:30:00 UTC</span></p>
</li><li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap; margin-left:11pt">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">End time: 2023-07-06 15:59:59 UTC</span></p>
</li></ul>
<br style="font-family:arial,sans-serif">
<p dir="ltr" style="font-family:arial,sans-serif; line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="color:rgb(0,0,0); font-weight:700; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Vote for approval (7 days)</span></p>
<ul style="font-family:arial,sans-serif; margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap; margin-left:11pt">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">Start time: 2023-07-06 16:00:00 UTC</span></p>
</li><li dir="ltr" style="list-style-type:disc; color:rgb(0,0,0); background-color:transparent; font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline; white-space:pre-wrap; margin-left:11pt">
<p dir="ltr" role="presentation" style="line-height:1.2; margin-top:0pt; margin-bottom:0pt">
<span style="font-variant-numeric:normal; font-variant-east-asian:normal; font-variant-alternates:normal; vertical-align:baseline">End time: 2023-07-13 16:00:00 UTC</span></p>
</li></ul>
</div>
</div>
<i>Any email and files/attachments transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. If this message has been sent to you in error, you must not copy, distribute or disclose of the information it contains.
<u>Please notify Entrust immediately and delete the message from your system.</u></i>
</body>
</html>