{
  "dataset": "TLS certificate and CA requirement effective dates (CA/Browser Forum, Chrome, Mozilla)",
  "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/",
  "feed": "https://referencesource.org/tls-certificate-requirement-effective-dates/changes.xml",
  "updated": "2026-08-05",
  "note": "Records grouped by the date they were added or last changed. A record's file is only rewritten when its values change, so these dates are the change history, not a re-crawl log.",
  "entries": [
    {
      "date": "2026-08-05",
      "records_changed": 45,
      "initial_snapshot": true,
      "records": [
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-4-and-3-2-2-5-cas-must-not-rely-on-methods-3-2-2-4-16-3-2-2-4-17-3-2-2-5-2-and-3-2-2-5-5-to-is",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-4-and-3-2-2-5-cas-must-not-rely-on-methods-3-2-2-4-16-3-2-2-4-17-3-2-2-5-2-and-3-2-2-5-5-to-is/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-4-and-3-2-2-5-cas-must-not-rely-on-methods-3-2-2-4-4-3-2-2-4-13-and-3-2-2-4-14-to-issue-subscr",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-4-and-3-2-2-5-cas-must-not-rely-on-methods-3-2-2-4-4-3-2-2-4-13-and-3-2-2-4-14-to-issue-subscr/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-rely-on-https-websites-to-identify-domain-contact-information-cas-m",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-rely-on-https-websites-to-identify-domain-contact-information-cas-m/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-rely-on-method-3-2-2-4-8-to-issue-subscriber-certificates",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-rely-on-method-3-2-2-4-8-to-issue-subscriber-certificates/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-rely-on-methods-3-2-2-4-2-and-3-2-2-4-15-to-issue-subscriber-certif",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-rely-on-methods-3-2-2-4-2-and-3-2-2-4-15-to-issue-subscriber-certif/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-use-local-policy-to-disable-dnssec-validation-on-any-dns-query-asso",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-4-cas-must-not-use-local-policy-to-disable-dnssec-validation-on-any-dns-query-asso/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-4-dnssec-validation-back-to-the-iana-dnssec-root-trust-anchor-must-be-performed-on",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-4-dnssec-validation-back-to-the-iana-dnssec-root-trust-anchor-must-be-performed-on/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-5-3-cas-must-not-rely-on-method-3-2-2-5-3-to-issue-subscriber-certificates",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-5-3-cas-must-not-rely-on-method-3-2-2-5-3-to-issue-subscriber-certificates/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-8-1-cas-must-not-use-local-policy-to-disable-dnssec-validation-on-any-dns-query-asso",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-8-1-cas-must-not-use-local-policy-to-disable-dnssec-validation-on-any-dns-query-asso/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-8-1-dnssec-validation-back-to-the-iana-dnssec-root-trust-anchor-must-be-performed-on",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-8-1-dnssec-validation-back-to-the-iana-dnssec-root-trust-anchor-must-be-performed-on/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-8-1-dnssec-validation-errors-observed-by-the-primary-network-perspective-e-g-servfai",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-8-1-dnssec-validation-errors-observed-by-the-primary-network-perspective-e-g-servfai/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-3-2-2-9-cas-must-corroborate-the-results-of-domain-validation-and-caa-checks-from-multip",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-3-2-2-9-cas-must-corroborate-the-results-of-domain-validation-and-caa-checks-from-multip/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-2-1-domain-name-and-ip-address-validation-maximum-data-reuse-period-is-10-days",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-2-1-domain-name-and-ip-address-validation-maximum-data-reuse-period-is-10-days/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-2-1-domain-name-and-ip-address-validation-maximum-data-reuse-period-is-100-days",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-2-1-domain-name-and-ip-address-validation-maximum-data-reuse-period-is-100-days/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-2-1-domain-name-and-ip-address-validation-maximum-data-reuse-period-is-200-days",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-2-1-domain-name-and-ip-address-validation-maximum-data-reuse-period-is-200-days/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-2-1-subject-identity-information-validation-maximum-data-reuse-period-is-398-days",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-2-1-subject-identity-information-validation-maximum-data-reuse-period-is-398-days/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-2-2-1-2-cas-must-process-the-accounturi-and-validationmethods-parameters-as-specified-in",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-2-2-1-2-cas-must-process-the-accounturi-and-validationmethods-parameters-as-specified-in/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-2-2-1-2-if-the-ca-does-not-identify-the-subscriber-account-via-an-acme-account-url-as-de",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-2-2-1-2-if-the-ca-does-not-identify-the-subscriber-account-via-an-acme-account-url-as-de/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-2-2-cas-shall-not-issue-certificates-containing-domain-names-that-end-in-an-ip-rever",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-2-2-cas-shall-not-issue-certificates-containing-domain-names-that-end-in-an-ip-rever/"
        },
        {
          "id": "ca-browser-forum-tls-baseline-requirements-4-3-1-2-the-ca-shall-implement-a-linting-process-to-test-the-technical-conformity-of-the",
          "url": "https://referencesource.org/tls-certificate-requirement-effective-dates/ca-browser-forum-tls-baseline-requirements-4-3-1-2-the-ca-shall-implement-a-linting-process-to-test-the-technical-conformity-of-the/"
        }
      ],
      "records_not_listed": 25
    }
  ]
}