RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

This memo profiles the X.509 v3 certificate and X.509 v2 Certificate Revocation List (CRL) for use in the Internet. [STANDARDS-TRACK]

Read RFC 3280 on the RFC Editor

Outgoing relationships (1 related RFC)

Obsoletes — RFC 2459: Internet X.509 Public Key Infrastructure Certificate and CRL Profile

Incoming relationships (57 related RFCs)

Showing 50 of 57 related RFCs.

Updated by — RFC 4325: Internet X.509 Public Key Infrastructure Authority Information Access Certificate Revocation List (CRL) Extension
Updated by, Normatively referenced by — RFC 4630: Update to DirectoryString Processing in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Obsoleted by — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normatively referenced by — RFC 3971: SEcure Neighbor Discovery (SEND)
Normatively referenced by — RFC 3972: Cryptographically Generated Addresses (CGA)
Normatively referenced by — RFC 4366: Transport Layer Security (TLS) Extensions
Normatively referenced by — RFC 4975: The Message Session Relay Protocol (MSRP)
Normatively referenced by — RFC 5272: Certificate Management over CMS (CMC)
Normatively referenced by — RFC 3580: IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines
Normatively referenced by — RFC 4572: Connection-Oriented Media Transport over the Transport Layer Security (TLS) Protocol in the Session Description Protocol (SDP)
Normatively referenced by — RFC 3850: Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Certificate Handling
Normatively referenced by — RFC 5216: The EAP-TLS Authentication Protocol
Normatively referenced by — RFC 4108: Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages
Normatively referenced by — RFC 4556: Public Key Cryptography for Initial Authentication in Kerberos (PKINIT)
Normatively referenced by — RFC 4954: SMTP Service Extension for Authentication
Normatively referenced by — RFC 3546: Transport Layer Security (TLS) Extensions
Normatively referenced by — RFC 5035: Enhanced Security Services (ESS) Update: Adding CertID Algorithm Agility
Normatively referenced by — RFC 3576: Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
Normatively referenced by — RFC 4535: GSAKMP: Group Secure Association Key Management Protocol
Normatively referenced by — RFC 4976: Relay Extensions for the Message Sessions Relay Protocol (MSRP)
Normatively referenced by — RFC 4985: Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name
Normatively referenced by — RFC 5055: Server-Based Certificate Validation Protocol (SCVP)
Normatively referenced by — RFC 4583: Session Description Protocol (SDP) Format for Binary Floor Control Protocol (BFCP) Streams
Normatively referenced by — RFC 4334: Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN)
Normatively referenced by — RFC 4642: Using Transport Layer Security (TLS) with Network News Transfer Protocol (NNTP)
Normatively referenced by — RFC 5019: The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments
Normatively referenced by — RFC 4171: Internet Storage Name Service (iSNS)
Normatively referenced by — RFC 4806: Online Certificate Status Protocol (OCSP) Extensions to IKEv2
Normatively referenced by — RFC 5018: Connection Establishment in the Binary Floor Control Protocol (BFCP)
Normatively referenced by — RFC 3520: Session Authorization Policy Element
Normatively referenced by — RFC 3820: Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile
Normatively referenced by — RFC 4158: Internet X.509 Public Key Infrastructure: Certification Path Building
Normatively referenced by — RFC 4398: Storing Certificates in the Domain Name System (DNS)
Normatively referenced by — RFC 4945: The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX
Normatively referenced by — RFC 4261: Common Open Policy Service (COPS) Over Transport Layer Security (TLS)
Normatively referenced by — RFC 4746: Extensible Authentication Protocol (EAP) Password Authenticated Exchange
Normatively referenced by — RFC 5008: Suite B in Secure/Multipurpose Internet Mail Extensions (S/MIME)
Informatively referenced by — RFC 3370: Cryptographic Message Syntax (CMS) Algorithms
Informatively referenced by — RFC 3281: An Internet Attribute Certificate Profile for Authorization
Informatively referenced by — RFC 5755: An Internet Attribute Certificate Profile for Authorization
Informatively referenced by — RFC 3369: Cryptographic Message Syntax (CMS)
Informatively referenced by — RFC 4046: Multicast Security (MSEC) Group Key Management Architecture
Informatively referenced by — RFC 7299: Object Identifier Registry for the PKIX Working Group
Informatively referenced by — RFC 3887: Message Tracking Query Protocol
Informatively referenced by — RFC 5153: IP Flow Information Export (IPFIX) Implementation Guidelines
Informatively referenced by — RFC 3114: Implementing Company Classification Policy with the S/MIME Security Label
Informatively referenced by — RFC 6728: Configuration Data Model for the IP Flow Information Export (IPFIX) and Packet Sampling (PSAMP) Protocols
Informatively referenced by — RFC 9190: EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3
Informatively referenced by — RFC 5126: CMS Advanced Electronic Signatures (CAdES)
Informatively referenced by — RFC 4810: Long-Term Archive Service Requirements