Final CA/Browser Forum SCWG agenda - F2F#68 - Wednesday, September 23 2026

[Dimitris Zacharopoulos (HARICA)]

Here is the final agenda for the subject call. 

Minute takers will be assigned at the start of the meeting.

Server Certificate Working Group

1. Take attendance, read anti-trust statement, minute taker(s)
2. Review Agenda
3. Minutes and membership
   1. Approve minutes
      1. August 27, 2026 (minutes distributed 2026-09-18)
      2. September 10, 2026 (minutes distributed 2026-09-16)
   2. Membership application for
      1. Huawai (Certificate Consumer)
      2. Microsec ltd. (CA Issuer - Voting Member)
4. Summary (5-10 minutes)
   1. Summary of this quarter (Dimitris Zacharopoulos - HARICA)
5. Topics
   1. Discussion on CP vs CPS vs CP/CPS, expectations for RFC 2119 language, "descriptive" vs "prescriptive", or "vague", "narrative", "non-technical" vs "specific", "detailed", "technical" (Dimitris Zacharopoulos - HARICA)
   2. Revocation Circumstances (Ben Wilson - Mozilla)
   3. Section 7 Cleanup and Modernizing Certificate Profile Expectations (Ryan Dickson - Google)
      • Removing unnecessary complexity (including revisiting the legacy framing around “technically constrained” Subordinate CAs) while establishing clearer, more standardized expectations for how certificate profiles are defined and disclosed.
   4. Aligning the BRs with “Dedicated” Hierarchy Expectations (Ryan Dickson - Google)
      • Defining clear, TLS-specific ICA profiles and establishing a future timeline where certificates chaining to those ICAs must lead to roots that exclusively serve TLS use cases (following up on our F2F 66 presentation).
   5. Profile-Specific Linting Expectations (Ryan Dickson - Google)
      • Moving beyond checking against generic BR minimums toward validating against a CA Owner’s explicitly stated commitments and specific profiles (which requires well-defined profiles as a prerequisite)
   6. CPS linter/generator overview (Tim Callan - Sectigo)
6. AOB (5-10 minutes)