<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Certum votes "Yes" to Ballot SC-073</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<p style="line-height: 12pt; background-color: rgb(255, 255, 255); margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(36, 36, 36);">
<span style="font-size: 12pt; color: black;">Best regards,</span></p>
<p style="line-height: 12pt; background-color: rgb(255, 255, 255); margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(36, 36, 36);">
<span style="font-size: 10pt; color: black;"><b>Kateryna Aleksieieva</b></span></p>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Od:</b> Servercert-wg <servercert-wg-bounces@cabforum.org> w imieniu użytkownika Wayne Thayer via Servercert-wg <servercert-wg@cabforum.org><br>
<b>Wysłane:</b> piątek, 26 kwietnia 2024 02:00<br>
<b>Do:</b> CA/B Forum Server Certificate WG Public Discussion List <servercert-wg@cabforum.org><br>
<b>Temat:</b> [Servercert-wg] Voting Period Begins - Ballot SC-073: Compromised and Weak Keys</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div dir="ltr">
<p dir="ltr" id="x_m_3076436754704620828gmail-docs-internal-guid-03c99b0b-7fff-1c11-84e1-099f15f7f345" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:700; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Purpose of Ballot SC-073</span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">This ballot proposes updates
to the Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates related to weak and compromised private keys. These changes lie primarily in Section
<a href="http://6.1.1.3/" originalsrc="http://6.1.1.3/" shash="JtONxNNdeZiXzAmc2nOVCYBX8AKO4t27/moFTdluwrpVREc1MOfkkwzoTEPZJeJedpnVRdsMA0XBl2Z28T6SvNH2+w8i9olGq2p1t7OIZ3qVAuRE9/t00zQSON0W5c1tne1/RvehZnnXko1GMPghTIuZOrvwiTGtN+gu1q/WUrw=" target="_blank">
6.1.1.3</a>:</span></p>
<ul style="margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:0pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">6.1.1.3(4) clarifies that,
for the purpose of this requirement, CAs shall be made aware of compromised keys using their existing notification mechanism(s).</span></p>
</li><li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">6.1.1.3(5) improves guidance
for CAs around the detection of weak keys. Should this ballot pass, these changes become effective on November 15, 2024.</span></p>
</li></ul>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Notes:</span></p>
<ul style="margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:0pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">This ballot builds on the
extensive work done by SSL.com in creating ballot SC-59v2 Weak Key Guidance. SSL.com’s contributions are appreciated.</span></p>
</li><li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Thanks to Rob Stradling
of Sectigo for the generation and publication of the set of Debian weak keys referenced in this ballot.</span></p>
</li><li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">The Debian weak keys requirements
have been discussed extensively, including in the following threads: </span><a href="https://lists.cabforum.org/pipermail/servercert-wg/2024-March/004291.html" originalsrc="https://lists.cabforum.org/pipermail/servercert-wg/2024-March/004291.html" shash="L0E+KS0JS+yMbce8zDtyPSLPIxnjwAXZUGYnnKLOOoN0JvwgxuGaUsl7jdTvzE2bBUYLJrZB6r+TBL4cIfuLgpaLv4FW9ZM7R8Pd6eGUa67Hs371znDIQiavX6oXPLaFm7QWhmrvh2oenr/sLW05GTqJOHa3rLOu4MHeE24ONr0=" target="_blank" style="text-decoration:none"><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(17,85,204); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:underline; vertical-align:baseline; white-space:pre-wrap">https://lists.cabforum.org/pipermail/servercert-wg/2024-March/004291.html</span></a><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
and </span><a href="https://lists.cabforum.org/pipermail/servercert-wg/2024-April/004422.html" originalsrc="https://lists.cabforum.org/pipermail/servercert-wg/2024-April/004422.html" shash="gSmZSI7noq1J3KNE2o1gttDY90F5k95KlNP7iibAxpUd1rO4mqVMp7Gg4IKlVpH5nnVQfHbM3f36iMkyRvTXRc/NrX3vD4IlQ42hfftjTT4gKnFJ8emSpV/ULxuU973eeKIU5pABNG6Ke7qZutw0HP3zLaNLoNK2GhNSJnWu5OY=" target="_blank" style="text-decoration:none"><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(17,85,204); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:underline; vertical-align:baseline; white-space:pre-wrap">https://lists.cabforum.org/pipermail/servercert-wg/2024-April/004422.html</span></a><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap"> </span></p>
</li><li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">This ballot does not appear
to conflict with any other ballots that are currently under discussion.</span></p>
</li></ul>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<br>
</p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">The following motion has
been proposed by Wayne Thayer of Fastly, and endorsed by Brittany Randall of GoDaddy and Bruce Morton of Entrust.</span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:700; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">— Motion Begins —</span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">This ballot modifies the
“Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” (“Baseline Requirements”), based on Version 2.0.3.</span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">MODIFY the Baseline Requirements
for the Issuance and Management of Publicly-Trusted TLS Server Certificates as specified in the following Redline:</span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Here is a link to the immutable
GitHub redline: </span><a href="https://github.com/cabforum/servercert/compare/a65402cff89affe1fc0a1f0e49807c7e42e1608a...bee10c8e4a56815bffd59fab12cbd4044baa7cc0" originalsrc="https://github.com/cabforum/servercert/compare/a65402cff89affe1fc0a1f0e49807c7e42e1608a...bee10c8e4a56815bffd59fab12cbd4044baa7cc0" shash="GkYtT1iJyu/7MftNwmt9/+HoGs5TC5rT/5P0rNgXJEgwNm84Nm41WY7GaY0/P+xEVDaixysTOJdNcDim8m+Mr+cIGdUJf9K04mii/Jq6dpdoSmkkzKeMBolwiqW/GGJ6R2GBhpyZXDXE7abX/u8m/YdwRuWeXgglv5ukvOUKe2Y=" target="_blank" style="text-decoration:none"><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(17,85,204); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:underline; vertical-align:baseline; white-space:pre-wrap">https://github.com/cabforum/servercert/compare/a65402cff89affe1fc0a1f0e49807c7e42e1608a...bee10c8e4a56815bffd59fab12cbd4044baa7cc0</span></a><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap"> </span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:700; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">— Motion Ends —</span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">This ballot proposes a Final
Maintenance Guideline. The procedure for approval of this ballot is as follows:</span></p>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:0pt; margin-bottom:12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:700; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Discussion (7+ days)</span></p>
<ul style="margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:0pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Start time: 2024-04-18 00:00:00
UTC</span></p>
</li><li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:0pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">End time: 2024-04-26 00:00:00
UTC</span></p>
</li></ul>
<p dir="ltr" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:700; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Vote for approval (7 days)</span></p>
<ul style="margin-top:0px; margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<p dir="ltr" role="presentation" style="line-height:1.38; background-color:rgb(255,255,255); margin-top:12pt; margin-bottom:0pt; padding:0pt 0pt 12pt">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">Start time: </span><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">2024-04-26
00:00:00 UTC</span></p>
</li><li dir="ltr" style="list-style-type:disc; font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">
<span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">End time:
</span><span style="font-size:11pt; font-family:Arial,sans-serif; color:rgb(0,0,0); background-color:transparent; font-weight:400; font-style:normal; font-variant:normal; text-decoration:none; vertical-align:baseline; white-space:pre-wrap">2024-05-03 00:00:00
UTC</span></li></ul>
</div>
</div>
</div>
</body>
</html>