CCADB Update: Additional validation methods available for CA Owner selection

[Chris Clements]

All,

The CCADB was updated to add the following TLS Certificate Domain and IP Address Control Validation Methods as options for selection by CA Owners:

• 3.2.2.4.21 DNS Labeled with Account ID - ACME
• 3.2.2.5.1 Agreed-Upon Change to Website
• 3.2.2.5.2 Email, Fax, SMS, or Postal Mail to IP Address Contact
• 3.2.2.5.3 Reverse Address Lookup
• 3.2.2.5.5 Phone Contact with IP Address Contact
• 3.2.2.5.6 ACME “http-01” method for IP Addresses
• 3.2.2.5.7 ACME “tls-alpn-01” method for IP Addresses

CA Owners implementing any of these methods can disclose their use by opening an “Add/Update Root Request” Case in the CCADB and selecting these values in the “PKI Hierarchy” section of the "ROOT INFORMATION" tab for any applicable root records.

Please continue to contact CCADB Support (sup...@ccadb.org) with any questions regarding the CCADB.

Thank you
-Chris, on behalf of the CCADB Steering Committee