<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:352655675;
mso-list-template-ids:567411258;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:1089274894;
mso-list-template-ids:1445657326;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=en-SE link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span lang=EN-US>All,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Draft minutes can be found below.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p style='margin:0cm'><b><span lang=en-SE style='color:black'>Attendees:</span></b><span lang=en-SE><o:p></o:p></span></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Aaron Poulsen - Amazon Trust Services<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Andrea Holland - SecureTrust<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Aneta Wojtczak - Microsoft<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Bruce Morton - Entrust<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Ben Wilson - Mozilla<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Chris Clements - Google Chrome<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Clint Wilson – Apple<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Corey Bonnell – DigiCert<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Corey Rasmussen - OATI</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Doug Beattie - GlobalSign</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Dustin Hollenback – Microsoft<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Inigo Barreira - Sectigo</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Janet Hines - SecureTrust</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Joanna Fox - TrustCor Systems<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Johnny Reading – GoDaddy<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Li-Chun Chen - </span><span lang=en-SE style='color:black'>Chunghwa Telecom</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Martijn Katerbarg – Sectigo</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Michael Slaughter – Amazon Trust Services</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Michelle Coon – OATI</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Paul van Brouwershaven - Entrust</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Pekka Lahtiharju - Telia</span><span lang=en-SE><o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Rebecca Kelley - Apple<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Ryan Dickson - Google Chrome<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Tim Hollebeek - DigiCert</span><b><span lang=en-SE><o:p></o:p></span></b></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Tobias Josefowitz - Opera<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Trevoli Ponds-White - Amazon Trust Services<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Tyler Myers – GoDaddy</span><b><span lang=en-SE><o:p></o:p></span></b></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=EN-US>Wayne Thaylor - Fastly</span><b><span lang=en-SE><o:p></o:p></span></b></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo3'><span lang=en-SE>Wendy Brown - US Federal PKI Management Authority<o:p></o:p></span></li></ul><p class=MsoNormal><span lang=en-SE><o:p> </o:p></span></p><p style='margin:0cm'><b><span lang=EN-US style='color:black'>Antitrust Statement<o:p></o:p></span></b></p><p><span lang=EN-US>The Antitrust Statement was read.<o:p></o:p></span></p><p class=MsoNormal><span lang=en-SE><o:p> </o:p></span></p><p style='margin:0cm'><b><span lang=EN-US style='color:black'>Minutes approval<o:p></o:p></span></b></p><p><span lang=EN-US>The minutes of the last meeting on August 11, 2022 were approved.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p style='margin:0cm'><b><span lang=EN-US style='color:black'>Certificate Profiles<o:p></o:p></span></b></p><p style='margin:0cm'><b><span lang=EN-US style='color:black'><o:p> </o:p></span></b></p><p class=MsoNormal><b><i><span lang=EN-US>“Pending prohibition” Defined Term<o:p></o:p></span></i></b></p><p class=MsoNormal><span lang=EN-US>PR 383 was opened by Aneta which adds explicit text to the dataEncipherment key usage stating it is allowed but will be removed in a future date. This change adds a new Pending Prohibition definition.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Wayne mentioned that at it’s currently written, it could be interpreted in such a way that it already is a MUST NOT. There is a discussion on which language should be used.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Aneta will amend the language in the PR.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Ryan suggests we should open up a GitHub issue any time we insert Pending Prohibition into the document.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>There is consensus on this and recommended to reference the GitHub issue in the document as a way of keeping track and make sure it will indeed be changed in a future ballot.<o:p></o:p></span></p><p class=MsoNormal><i><span lang=EN-US><o:p> </o:p></span></i></p><p class=MsoNormal><b><i><span lang=en-SE>All-encompassing effective date<o:p></o:p></span></i></b></p><p class=MsoNormal><span lang=EN-US>PR 381. Corey has made changes to the document set an effective date. It calls out a term where both the current as well as the new requirements may be used. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Ryan inquired if this approach was acceptable for auditors. This concern was raised during the last face-to-face and resolved at that time.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Clint points out that a MUST NOT appears to have been turned into a NOT RECOMMENDED in the certificatePolicies requirement for OCSP Responder Extensions. This still remains a wide-spread practice. Corey will reverse this change.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><i><span lang=EN-US>GRID resolution<o:p></o:p></span></i></b></p><p class=MsoNormal><span lang=EN-US>Martijn asked regarding the status of the GRID resolution. This currently is pending a draft to be created by Dimitris<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US>Cleanup items<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p><p class=MsoNormal><b><i><span lang=EN-US>Clean up EV Enterprise RA language<o:p></o:p></span></i></b></p><p class=MsoNormal><span lang=EN-US>GitHub issue 344 has commits for a proposal to remove the EV Enterprise RA language. There are no comments at this point. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><i><span lang=EN-US>Removal of EV CRL 3-second rule<o:p></o:p></span></i></b></p><p class=MsoNormal><span lang=EN-US>No current comments on the proposal to remove this language. <br><br>Both items are to be combined in a single cleanup ballot<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US>High-priority “on deck” items<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><i><span lang=EN-US>Clarify Applicant/Subscriber and CA relationship <o:p></o:p></span></i></b></p><p class=MsoNormal><span lang=EN-US>Wayne: 3.2.2.4 says that the Applicant must prove control of the domain, and implies that the CA is not allowed to do this themselves. When the CA is also the Applicant, the CA is directly performing the domain validation.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Tim suggests starting with a couple of troublesome use cases, such as the CA issuing a certificate to themselves. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>There’s a discussion on how permissive the requirements should or could be read. Trevoli suggests members take a fresh read through the BRs, specifically sections where “Applicant” is used, and come back fresh to the next meeting to help sort this out.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>This will be the first topic on the next meeting.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Regards,<br><br>Martijn Katerbarg<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US><o:p> </o:p></span></b></p></div></body></html>