Issues

• Improve consistency and transparency of CA key generation

  cabforum/servercert#688 · Filter by author ryancdickson opened on Nov 5, 2026
  2

• Prohibit CA Private Key material in plaintext outside a validated cryptographic module

  cabforum/servercert#687 · Filter by author ryancdickson opened on Nov 5, 2026
  2

• Prohibit reuse of domain validation data after revocation

  cabforum/servercert#686 · Filter by author ryancdickson opened on Nov 5, 2026
  1

• Require disclosure of audited locations

  cabforum/servercert#685 · Filter by author BenWilson-Mozilla opened on Nov 1, 2026
  1

• [BR] §8.1: "no pre-issuance readiness assessment is necessary" — the assessment is no longer defined

  cabforum/servercert#684 · Filter by author rifmj opened on Oct 31, 2026
  1

• Clarify or remove EV Certificate CA warranty about Certificate Status

  ev-guidelines
  cabforum/servercert#681 · Filter by author dzacharo opened on Oct 5, 2026
  1

• 3.2.2.4.22: Consider extracting ACME dns-persist-01 into separate validation method

  cabforum/servercert#677 · Filter by author slghtr-says opened on Jul 21, 2026
  2

• 3.2.2.4.22: Consider adding support for "policy=wildcard" parameter from ACME dns-persist-01

  cabforum/servercert#676 · Filter by author slghtr-says opened on Jul 21, 2026
  1

• 3.2.2.4.22: Clarify Case-sensitivity for parameter keys (persistUntil vs. persistuntil)

  cabforum/servercert#675 · Filter by author slghtr-says opened on Jul 9, 2026
  2

• 3.2.2.4.22: Clarify one-to-many accounturis

  cabforum/servercert#674 · Filter by author slghtr-says opened on Jul 9, 2026
  1

• Update high risk definition

  baseline-requirementsclean-upvalidation-sc
  cabforum/servercert#672 · Filter by author srdavidson opened on Jul 7, 2026
  2

• No Revocation Available extension

  baseline-requirements
  cabforum/servercert#670 · Filter by author dzacharo opened on Jun 20, 2026
  1

• Recommend inclusion of company type, where applicabile, in the Subject.organizatioName attribute

  cabforum/servercert#666 · Filter by author defacto64 opened on May 8, 2026
  1

• Create a new BR method for ACME dns-01

  validation-sc
  cabforum/servercert#660 · Filter by author CBonnell opened on Apr 16, 2026
  1

• Consider forbidding countryName in DV profile

  cabforum/servercert#659 · Filter by author aarongable opened on Apr 2, 2026
  2

• Usage period for 3.2.2.4.7 DNS Change Random Values

  clean-up
  cabforum/servercert#655 · Filter by author aarongable opened on Mar 4, 2026
  1

• EVG section 6.3.2 on certificate validity period needs update or remove

  clean-upev-guidelines
  cabforum/servercert#654 · Filter by author barrini opened on Feb 26, 2026
  2

• Reference to ETSI EN 319 403

  clean-up
  cabforum/servercert#652 · Filter by author srdavidson opened on Feb 11, 2026
  1

• Missing RFC 8555 in Section 1.6.3 References

  baseline-requirementsclean-up
  cabforum/servercert#651 · Filter by author barrini opened on Feb 9, 2026
  1

• Update reference to S/MIME, Code Signing BRs

  baseline-requirementsclean-upsimple
  cabforum/servercert#649 · Filter by author wthayer opened on Jan 22, 2026
  2

• Establish CRL "backdating" expectations

  cabforum/servercert#648 · Filter by author ryancdickson opened on Jan 21, 2026
  4

• AlphaSTAR

  cabforum/servercert#638 · Filter by author tiffanydawnatkins-cloud opened on Dec 3, 2025
  1

• Clean up usage of "FQDN" versus "FQDN or Wildcard Domain Name"

  cabforum/servercert#621 · Filter by author aarongable opened on Oct 2, 2025
  1

• Improve TLS BR section 2.2 test website requirements

  baseline-requirements
  cabforum/servercert#618 · Filter by author wthayer opened on Sep 25, 2025
  1

• Remove all instances of precertificate signing CAs from the TLS BRs

  baseline-requirementsclean-up
  cabforum/servercert#617 · Filter by author ryancdickson opened on Sep 18, 2025
  4