<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Calibri",sans-serif;
color:black;
font-weight:bold;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Calibri",sans-serif;
color:black;
font-weight:bold;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1332609608;
mso-list-type:hybrid;
mso-list-template-ids:913205850 -1833813806 536870915 536870917 536870913 536870915 536870917 536870913 536870915 536870917;}
@list l0:level1
{mso-level-start-at:15;
mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><h2><span style='font-size:11.0pt'>Attendees<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>Aaron Poulsen - (Amazon), Aneta Wojtczak-Iwanicka - (Microsoft), Ben Wilson - (Mozilla), Bruce Morton - (Entrust), Chris Clements - (Google), Corey Bonnell - (DigiCert), Corey Rasmussen - (OATI), Dimitris Zacharopoulos - (HARICA), Dustin Hollenback - (Microsoft), Enrico Entschew - (D-TRUST), Joanna Fox - (TrustCor Systems), Johnny Reading - (GoDaddy), Joseph Ramm - (OATI), Martijn Katerbarg - (Sectigo), Michael Slaughter - (Amazon), Michelle Coon - (OATI), Nargis Mannan - (SecureTrust), Paul van Brouwershaven - (Entrust), Pekka Lahtiharju - (Telia Company), Rebecca Kelley - (Apple), Ryan Dickson - (Google), Stephen Davidson - (DigiCert), Tobias Josefowitz - (Opera Software AS), Trevoli Ponds-White - (Amazon), Tyler Myers - (GoDaddy), Wayne Thayer - (Fastly)<o:p></o:p></span></h2><h2><span style='font-size:11.0pt'>Antitrust statement<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>The antitrust statement was read.<o:p></o:p></span></h2><h2><span style='font-size:11.0pt'>Minutes<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>The next two scheduled minute takers were not on the call. Martijn volunteered to take minutes.<o:p></o:p></span></h2><h2><span style='font-size:11.0pt'>Approval of previous minutes<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>Minutes of the November 3<sup>rd</sup> meeting were approved<o:p></o:p></span></h2><h2><span style='font-size:11.0pt'>Certificate profiles discussion<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>No current open PRs. Corey is working on reflecting the ballots of the last year into the certificate profiles branch. <o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>No further discussion at this time<o:p></o:p></span></h2><h2><span style='font-size:11.0pt'>Inclusion of LEI in Subject<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>GitHub issue 354 has been in our backlog for a while. With the S/MIME BRs being approved, Inigo ask the question if we want to increase the priority on this. Dimitris raised the point that if the S/MIME WG has defined language, we may just need to copy their language, which would make it an easy ballot. If anyone in this group wants to draft language, they can go ahead and it may not take much discussion time.<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>There’s consensus on keeping the profile ballot as the highest priority. Dimitris volunteered to start drafting language and will reach out to Inigo, but not create a ballot before the profiles ballot has passed.<o:p></o:p></span></h2><h2><span style='font-size:11.0pt;font-weight:normal'>Trevoli mentioned that last time LEI was discussed there was a lot of support from CAs it, but pushback from some of the browsers. If there is any direct concern it is requested they reach out. Ryan stated he will discuss internally to see if there are any immediate concerns.<o:p></o:p></span></h2><h2><span style='font-size:11.0pt'>Use of “Applicant” and “Applicant Representative”<o:p></o:p></span></h2><p>Continuing in section 9.6 of the BRs<o:p></o:p></p><ul type=disc><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'>9.6.1 (1)(i): The “right to use” seems to be a point to discuss. All domain validation methods currently use “control of”. Ben believes this is historical language and possibly no longer applicable. Group consensus is to check through section 3.2.2.4 before possibly removing this part of the language in the entire section in a future cleanup ballot.<o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'>9.6.1 (1)(ii): No issues<o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'>9.6.1 (5) & (5)(i): No issues<o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'>9.6.1 (6): The section specifically calls out the scenario where the CA and Subscriber are the same party, or affiliates. There’s a discussion on the fact that a CA needs to agree to its own terms. A backlog issue will be created to revisit this item in the future. Corey mentions that going through section 9.6.3. may give more clarity on why the language is added as such.<o:p></o:p></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'>9.6.3: “The CA SHALL implement a process to ensure that each Subscriber Agreement or Terms of Use is legally enforceable against the Applicant” is called out again as an issue when the CA is also the Subscriber. The fact that the hosting provider is called out in this section is also raised by Corey, however not discussed due to time constraints.<o:p></o:p></li></ul><p>We will resume discussion of 9.6.3 on the December 1<sup>st</sup> meeting.<o:p></o:p></p><p>Meeting adjourned.<o:p></o:p></p></div></body></html>