Weekly github digest (Server Certificate Working Group)

[Infrastructure Bot]

Sunday August 31, 2025

Issues

cabforum/servercert (+1/-0/💬4)

1 issues created:

• #612 Issuance of SRV-ID (SRVName) certificates (by mimi89999)

3 issues received 4 new comments:

• #612 Issuance of SRV-ID (SRVName) certificates (1 by github-actions)
• #604 Proposal for alternative to new Chrome Root Program policy regarding `id-kp-clientAuth` (2 by mimi89999, nicowilliams)
• #268 BRs: Clarify how SRVName subjectAltNames should behave (1 by mimi89999) enhancement baseline-requirements

Pull requests

cabforum/servercert (+3/-2/💬0)

3 pull requests submitted:

• #613 Fix formatting in table 1.2.1 (by dzacharo)
• #611 SC-089: Mass Revocation Planning (by dzacharo)
• #610 SC-089: Mass Revocation Planning (by dzacharo)

2 pull requests merged:

• #611 SC-089: Mass Revocation Planning
• #610 SC-089: Mass Revocation Planning

Repositories tracked by this digest:

• https://github.com/cabforum/servercert

[Infrastructure Bot]

Sunday September 07, 2025

Issues

cabforum/servercert (+1/-0/💬3)

1 issues created:

• #614 Please require SHA256 usage for OCSP responses for issuer Name and Key hashes (by xnox)

2 issues received 3 new comments:

• #614 Please require SHA256 usage for OCSP responses for issuer Name and Key hashes (2 by clintwilson, github-actions)
• #577 Clarify if CAA records have to be validated for reverse lookup and "ipaddress" certificates (1 by clintwilson) baseline-requirements validation-sc

[Infrastructure Bot]

Sunday September 14, 2025

Issues

cabforum/servercert (+0/-0/💬1)

1 issues received 1 new comments:

• #588 Sunset 7.1.2.4 - Technically Constrained Precertificate Signing CA Certificate Profile (1 by ryancdickson)

Pull requests

cabforum/servercert (+2/-0/💬4)

2 pull requests submitted:

• #616 SC-090: "Gradually sunset all remaining email-based, phone-based, and ‘crossover’ validation methods from Sections 3.2.2.4 and 3.2.2.5" (by ryancdickson)
• #615 SC-0XX: "Sunset use of Precertificate Signing CAs" (by ryancdickson)

2 pull requests received 4 new comments:

• #616 SC-090: "Gradually sunset all remaining email-based, phone-based, and ‘crossover’ validation methods from Sections 3.2.2.4 and 3.2.2.5" (1 by ganeshmallaya)
• #615 SC-0XX: "Sunset use of Precertificate Signing CAs" (3 by XolphinMartijn, robstradling, ryancdickson)