# The Chrome Root Program will phase-out PKI hierarchies found issuing new certificates containing a Baseline Requirements certificate policy OID lacking an automation solution attestation disclosure in the CCADB. — TLS certificate and CA requirement effective dates (CA/Browser Forum, Chrome, Mozilla)

For The Chrome Root Program will phase-out PKI hierarchies found issuing new certificates containing a Baseline Requirements certificate policy OID lacking an automation solution attestation disclosure in the CCADB., requirement is The Chrome Root Program will phase-out PKI hierarchies found issuing new certificates containing a Baseline Requirements certificate policy OID lacking an automation solution attestation disclosure in the CCADB; effective date is 2027-03-15; authority is Google Chrome Root Program; scope is CAs included in the Chrome Root Store, recorded from its source on 2026-08-05.

- **Requirement:** The Chrome Root Program will phase-out PKI hierarchies found issuing new certificates containing a Baseline Requirements certificate policy OID lacking an automation solution attestation disclosure in the CCADB. _(verified: appears in the quote below)_
- **Effective date:** 2027-03-15
- **Authority:** Google Chrome Root Program _(our reading, not quoted from the source)_
- **Scope:** CAs included in the Chrome Root Store _(our reading, not quoted from the source)_

## What the source says

> Beginning March 15, 2027 , the Chrome Root Program will phase-out PKI hierarchies found issuing new certificates containing a Baseline Requirements certificate policy OID lacking an automation solution attestation disclosure in the CCADB.

## Source

- https://googlechrome.github.io/chromerootprogram/

Last verified: 2026-08-05. Review by: 2026-11-03.
Part of [TLS certificate and CA requirement effective dates (CA/Browser Forum, Chrome, Mozilla)](https://referencesource.org/tls-certificate-requirement-effective-dates/).