Baseline Requirements: Add a section to 9.6.3's Subscriber Agreement regarding 4.9.1.1

[sleevi]

Currently, the Baseline Requirements require that the Subscriber Agreement includes the following:

8. Acknowledgment and Acceptance: An acknowledgment and acceptance that the CA is
entitled to revoke the certificate immediately if the Applicant were to violate the terms of
the Subscriber Agreement or Terms of Use or if the CA discovers that the Certificate is
being used to enable criminal activities such as phishing attacks, fraud, or the distribution
of malware.

However, this does not require that the Subscriber accepts that the CA is entitled to revoke for any of the reasons stated within their CP/CPS or Section 4.9.1.1 (or, indirectly, through 4.9.1.2). It only places the acceptance based on the Subscriber actions, without recognizing that the CA may have cause to revoke for CA-related actions.

One possible suggestion is:

8. Acknowledgment and Acceptance: An acknowledgment and acceptance that the CA is
entitled to revoke the certificate immediately if the Applicant were to violate the terms of
the Subscriber Agreement or Terms of Use or if the CA is determines revocation is
necessary according to these Baseline Requirements.

While more wordsmithing and discussion is needed, within the CA/Browser Forum, the replaced clause is already addressed within the CA's Baseline Requirements, and any CA-specific modifications are addressed by 4.9.1.1 requiring revocation MUST happen within 5 days if

10. Revocation is required by the CA's Certificate Policy and/or Certification Practice Statement;