<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><b><i>DigiCert releases significant update for its open source linting framework, pkilint, to support linting certificates against the Ballot SC-62 profiles<o:p></o:p></i></b></p><p class=MsoNormal>Building on the successful release earlier this year of pkilint as open-source software under the permissive MIT license, DigiCert is pleased to announce that pkilint 0.9.0 has been released today. This release adds comprehensive support for linting certificates against the certificate profiles defined in Ballot SC-62 for the CA/Browser Forum’s TLS Baseline Requirements. In particular, support for linting root certificates, intermediate certificates, end-entity Subscriber certificates, as well as OCSP delegated responder certificates is now included.<o:p></o:p></p><p class=MsoNormal>Pkilint can be easily installed as a Python package that is publicly available on PyPi (<a href="https://pypi.org/project/pkilint/">https://pypi.org/project/pkilint/</a>). Installation and usage instructions are available on the PyPi page for pkilint, or on the Github repository (<a href="https://github.com/digicert/pkilint">https://github.com/digicert/pkilint</a>). <o:p></o:p></p><p class=MsoNormal>Ballot SC-62 dramatically increased the clarity surrounding requirements for the profile of publicly trusted certificates, and we greatly encourage industry participants to leverage pkilint in their transition strategy to compliant profiles prior to the Ballot SC-62 effective date.<o:p></o:p></p><p class=MsoNormal>Bugs or other issues can be reported on the Github repository. Additionally, we welcome contributions to improve the framework.<o:p></o:p></p><p class=MsoNormal>Near-term plans for enhancements include support for CRL linting against the Ballot SC-63 profile. Additionally, work is planned to add an embedded REST API server for all linters included in the framework so that pkilint can be more readily integrated into CA issuance pipelines and to boost performance. Finally, Docker images will be published alongside the Python package for each release to further ease the upgrade process in CA environments.<o:p></o:p></p><p class=MsoNormal>If you have any questions or comments, please don’t hesitate to reach out.<o:p></o:p></p><p class=MsoNormal style='margin-bottom:0in;line-height:107%'>Thanks,<o:p></o:p></p><p class=MsoNormal style='margin-bottom:0in;line-height:107%'>Corey<o:p></o:p></p></div></body></html>