Voting Period Begins: Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

[Ethan Davis]

Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

Ballot Summary

This ballot updates the Baseline Requirements to change the presence of the Authority Information Access (AIA) extension in Subscriber Certificates from MUST to SHOULD, aligning it with the permissible access methods.

Ballot Background
The Baseline Requirements currently specify the presence of AccessDescriptions with the id-ad-caIssuers and id-ad-ocsp accessMethods as SHOULD and MAY respectively in Subscriber Certificates, permitting no other accessMethods.

This ballot is proposed by Ethan Davis (Google Trust Services) and endorsed by Roman Fischer (SwissSign) and Stephen Davidson (DigiCert).

--- Motion Begins ---

Modify the "Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates", based on Version 2.2.9, per the following redline:

https://github.com/cabforum/servercert/compare/ad77bf1975fe1dffebb9cbdb7280eb80b94f5c45..a0f9a7e16894df52db6278952244944390c2c83d

--- Motion Ends ---

This ballot proposes a Final Maintenance Guideline and will be subject to a 30-day IPR Review Period following a successful vote.

Discussion Period (at least 7 calendar days):

• Start time: Thursday, 2026-08-20 00:00 UTC
• End time: Thursday, 2026-08-27 00:00 UTC

Vote for approval (exactly 7 calendar days):

• Start time: Thursday, 2026-08-27 00:00 UTC
• End time: Thursday, 2026-09-03 00:00 UTC

[Dimitris Zacharopoulos (HARICA)]

HARICA votes "yes" to ballot SC104.

--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/CAEsLWXFofcmGysxZ8AdOFShgxTxj5nEY2ei9abHiaXLZ%2B3CA8A%40mail.gmail.com.

[Pedro FUENTES]

OISTE votes yes

Le 27 août 2026 à 02:01, 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org> a écrit :



--

[Aaron Gable]

Let's Encrypt / ISRG votes Yes on Ballot SC-104.

--

[Ryan Dickson]

Google votes "Yes" on Ballot SC-104.

To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/CAEmnErf5WTk3TxGbEs_3DyDYPkHcpO%2BmdVBjvHQ7MSrVcZRJAw%40mail.gmail.com.

[Ben Wilson]

Mozilla votes "Yes" on Ballot SC-104

--

[蔡家宏(chtsai)]

TWCA votes “YES” on Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates.

 

 

Best Regards

 

蔡家宏 Chya-Hung Tsai

Director

Identification & Certificate Research
Tel: +886-2-2370-8886 ext. 722
Fax: +886-2-2388-6720
Email: cht...@twca.com.tw

10F., No. 85, Yanping South Road,

Taipei 100002, Taiwan(R.O.C.)
https://www.twca.com.tw

--

[Hogeun Yoo]

NAVER Cloud Trust Services votes YES on ballot SC-104.

2026년 8월 27일 목요일 오전 9시 1분 35초 UTC+9에 etd...@google.com님이 작성:

[sde...@godaddy.com]

GoDaddy votes Yes on Ballot SC-104. 

Regards, 

Steven Deitte

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>

Date: Wednesday, August 26, 2026 at 8:01 PM
To: server...@groups.cabforum.org <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting Period Begins: Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

This Message Is From an External Sender

This message came from outside your organization.

 

[Wayne Thayer]

Fastly votes Yes on Ballot SC-104.

- Wayne

--

[大野文彰（ONO Fumiaki）]

SECOM Trust Systems votes YES on Ballot SC-104.

Best regards,

ONO Fumiaki / 大野 文彰
(Japanese name order; family name in uppercase)
SECOM Trust Systems CO., LTD.

2026年8月27日木曜日 9:01:35 UTC+9 etd...@google.com:

[Alvin Wang]

SHECA votes "Yes" on Ballot SC-104.

Best Regards

Alvin.Wang

[Tugba ÖZCAN (BILGEM KSM)]

Kamu SM votes "yes" to ballot SC104.

   

 

Tuğba ÖZCAN
TÜBİTAK BİLGEM

Kamu Sertifikasyon Merkezi/E-İmza Teknolojileri Birim Yöneticisi

tugba...@tubitak.gov.tr, +90 262 648 18 18 - 8543

bilgem.tubitak.gov.tr | Sorumluluk Reddi                 

   

---

Kimden: "'Ethan Davis' via Server Certificate WG (CA/B Forum)" <server...@groups.cabforum.org>
Kime: "servercert-wg" <server...@groups.cabforum.org>
Gönderilenler: 27 Ağustos Perşembe 2026 3:00:00
Konu: [Servercert-wg] Voting Period Begins: Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

⚠ Kurum Harici E-posta!!! | Bu e-posta kurum harici bir adresten gelmektedir. Emin olunmayan adresler, ekler ve linkler dikkatle incelenmelidir.

--

[Roman Fischer]

SwissSign votes YES on SC-104.

 

Regards
Roman

--

[Nome Huang]

TrustAsia votes "Yes" on Ballot SC-104.

On Thursday, August 27, 2026 at 8:01:35 AM UTC+8 etd...@google.com wrote:

[Kateryna Aleksieieva]

Certum votes YES on Ballot SC-104

 

Kind regards,

Kateryna Aleksieieva

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>

Sent: Thursday, August 27, 2026 2:00 AM
To: server...@groups.cabforum.org

--

[Dustin Hollenback]

Apple votes “yes” on SC-104.

To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/DU0PR10MB72648862C5A394227518743181A92%40DU0PR10MB7264.EURPRD10.PROD.OUTLOOK.COM.

[Peter Miškovič]

Disig votes „YES“ on  Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates.

 

Regards

Peter Miskovic

 

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>

Sent: štvrtok 27. augusta 2026 2:00
To: server...@groups.cabforum.org

--

[Andrea Holland]

IdenTrust votes Yes on SC-104

 

Sincerely,

Andrea Holland

 

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>

Sent: Wednesday, August 26, 2026 8:00 PM
To: server...@groups.cabforum.org

--

[jun....@cybertrust.co.jp]

Cybertrust Japan votes Yes on Ballot SC-104

-----Original Message-----
From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Sent: Thursday, August 27, 2026 9:00 AM
To: server...@groups.cabforum.org

Subject: [Servercert-wg] Voting Period Begins: Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

Ballot Summary
This ballot updates the Baseline Requirements to change the presence of the Authority Information Access (AIA) extension in Subscriber Certificates from MUST to SHOULD, aligning it with the permissible access methods.

Ballot Background
The Baseline Requirements currently specify the presence of AccessDescriptions with the id-ad-caIssuers and id-ad-ocsp accessMethods as SHOULD and MAY respectively in Subscriber Certificates, permitting no other accessMethods.

This ballot is proposed by Ethan Davis (Google Trust Services) and endorsed by Roman Fischer (SwissSign) and Stephen Davidson (DigiCert).

--- Motion Begins ---

Modify the "Baseline Requirements for the Issuance and Management of Publicly-Trusted TLS Server Certificates", based on Version 2.2.9, per the following redline:

https://github.com/cabforum/servercert/compare/ad77bf1975fe1dffebb9cbdb7280eb80b94f5c45..a0f9a7e16894df52db6278952244944390c2c83d

--- Motion Ends ---

This ballot proposes a Final Maintenance Guideline and will be subject to a 30-day IPR Review Period following a successful vote.

Discussion Period (at least 7 calendar days):

* Start time: Thursday, 2026-08-20 00:00 UTC
* End time: Thursday, 2026-08-27 00:00 UTC

Vote for approval (exactly 7 calendar days):

* Start time: Thursday, 2026-08-27 00:00 UTC
* End time: Thursday, 2026-09-03 00:00 UTC

--
You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.

To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org <mailto:servercert-w...@groups.cabforum.org> .
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/CAEsLWXFofcmGysxZ8AdOFShgxTxj5nEY2ei9abHiaXLZ%2B3CA8A%40mail.gmail.com <https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/CAEsLWXFofcmGysxZ8AdOFShgxTxj5nEY2ei9abHiaXLZ%2B3CA8A%40mail.gmail.com?utm_medium=email&utm_source=footer> .

[qi_ji...@itrus.com.cn]

iTrusChina votes "Yes" on Ballot SC-104.

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum)

--

You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.

To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/CAEsLWXFofcmGysxZ8AdOFShgxTxj5nEY2ei9abHiaXLZ%2B3CA8A%40mail.gmail.com.

[Backman, Antti]

Telia votes ‘Yes’ on Ballot SC-104

//Antti

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>
Date: Thursday, 27. August 2026 at 3.01
To: server...@groups.cabforum.org <server...@groups.cabforum.org>
Subject: [Servercert-wg] Voting Period Begins: Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

Caution: This is an external email. Stop, assess and verify. Please take care when clicking links or opening attachments! When in doubt, report it using “report phishing” function.

[郭宗閔]

Chunghwa Telecom votes "yes" to ballot SC104.

 

 

Regards,

Tsung-Min Kuo

Chunghwa Telecom Co., Ltd., Taiwan (R.O.C.)

 

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>

Sent: Thursday, August 27, 2026 8:00 AM
To: server...@groups.cabforum.org

Subject: [外部郵件][Servercert-wg] Voting Period Begins: Ballot SC-104: Set presence of AIA extension to SHOULD for Subscriber Certificates

--

You received this message because you are subscribed to the Google Groups "Server Certificate WG (CA/B Forum)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to servercert-w...@groups.cabforum.org.
To view this discussion visit https://groups.google.com/a/groups.cabforum.org/d/msgid/servercert-wg/CAEsLWXFofcmGysxZ8AdOFShgxTxj5nEY2ei9abHiaXLZ%2B3CA8A%40mail.gmail.com.

本信件可能包含中華電信股份有限公司機密資訊,非指定之收件者,請勿蒐集、處理或利用本信件內容,並請銷毀此信件. 如為指定收件者,應確實保護郵件中本公司之營業機密及個人資料,不得任意傳佈或揭露,並應自行確認本郵件之附檔與超連結之安全性,以共同善盡資訊安全與個資保護責任.
Please be advised that this email message (including any attachments) contains confidential information and may be legally privileged. If you are not the intended recipient, please destroy this message and all attachments from your system and do not further collect, process, or use them. Chunghwa Telecom and all its subsidiaries and associated companies shall not be liable for the improper or incomplete transmission of the information contained in this email nor for any delay in its receipt or damage to your system. If you are the intended recipient, please protect the confidential and/or personal information contained in this email with due care. Any unauthorized use, disclosure or distribution of this message in whole or in part is strictly prohibited. Also, please self-inspect attachments and hyperlinks contained in this email to ensure the information security and to protect personal information.

[Adam Fiock]

SSL.com votes “Yes” on Ballot SC-104.

--

[Chad Dandar (cdandar)]

Cisco votes "Yes" on Ballot SC-104.

 

Chad Dandar

Cisco

 

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>

Sent: Wednesday, August 26, 2026 5:00 PM
To: server...@groups.cabforum.org

--

[Karina Sirota Goodley]

Microsoft votes Yes on Ballot SC-104.

[Christophe Bonjean]

GlobalSign votes “Yes” on Ballot SC-104.

 

Christophe

 

From: 'Ethan Davis' via Server Certificate WG (CA/B Forum) <server...@groups.cabforum.org>

Sent: 27 August 2026 02:00
To: server...@groups.cabforum.org

--

[Dimitris Zacharopoulos (HARICA)]

This vote was submitted after the voting period ended so it will not be counted.

Thank you,
Dimitris

--
Dimitris Zacharopoulos
CA/B Forum SCWG Chair