From 1st June 2023, in accordance with CAB Forum guidelines, private keys for Code Signing certificates will be required to be stored on certified hardware.

The CAB Forum has decided that, from 1 September 2022, the “Organisation Unit” (OU) field will no longer be accepted in SSL Certificates.

The CAB Forum has approved an amendment to the Baseline Requirements, changing the rules on domain validation. From 1st December 2021, restrictions on HTTP-based validation methods will be introduced, in so much as they only prove the control of a particular host and service (not of the entire domain name).

As set out in the Baseline Requirements for the Issuance and Management of Publicly-Trusted Code Signing Certificates released by the CAB Forum, from 1 June 2021 RSA keys for code signing certificates will need to have a minimum size of 3072 bits.