RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

This memo profiles the X.509 v3 certificate and X.509 v2 certificate revocation list (CRL) for use in the Internet. An overview of this approach and model is…

Read RFC 5280 on the RFC Editor

Outgoing relationships (3 related RFCs)

Obsoletes — RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Obsoletes — RFC 4325: Internet X.509 Public Key Infrastructure Authority Information Access Certificate Revocation List (CRL) Extension
Obsoletes — RFC 4630: Update to DirectoryString Processing in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

Incoming relationships (262 related RFCs)

Showing 50 of 262 related RFCs.

Updated by — RFC 8398: Internationalized Email Addresses in X.509 Certificates
Updated by, Normatively referenced by — RFC 6818: Updates to the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Updated by — RFC 8399: Internationalization Updates to RFC 5280
Updated by, Normatively referenced by — RFC 9549: Internationalization Updates to RFC 5280
Updated by, Normatively referenced by — RFC 9598: Internationalized Email Addresses in X.509 Certificates
Updated by, Normatively referenced by — RFC 9608: No Revocation Available for X.509 Public Key Certificates
Updated by, Normatively referenced by — RFC 9618: Updates to X.509 Policy Validation
Updated by, Normatively referenced by — RFC 9925: Unsigned X.509 Certificates
Updated by, Normatively referenced by — RFC 10007: Clarification to Processing Key Usage Values During Certificate Revocation List (CRL) Validation
Normatively referenced by — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normatively referenced by — RFC 5652: Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normatively referenced by — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normatively referenced by — RFC 5912: New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)
Normatively referenced by — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Normatively referenced by — RFC 5996: Internet Key Exchange Protocol Version 2 (IKEv2)
Normatively referenced by — RFC 7515: JSON Web Signature (JWS)
Normatively referenced by — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normatively referenced by — RFC 6733: Diameter Base Protocol
Normatively referenced by — RFC 5480: Elliptic Curve Cryptography Subject Public Key Information
Normatively referenced by — RFC 6268: Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX)
Normatively referenced by — RFC 6353: Transport Layer Security (TLS) Transport Model for the Simple Network Management Protocol (SNMP)
Normatively referenced by — RFC 6487: A Profile for X.509 PKIX Resource Certificates
Normatively referenced by — RFC 7517: JSON Web Key (JWK)
Normatively referenced by — RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
Normatively referenced by — RFC 7516: JSON Web Encryption (JWE)
Normatively referenced by — RFC 7250: Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normatively referenced by — RFC 5753: Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 5763: Framework for Establishing a Secure Real-time Transport Protocol (SRTP) Security Context Using Datagram Transport Layer Security (DTLS)
Normatively referenced by — RFC 6614: Transport Layer Security (TLS) Encryption for RADIUS
Normatively referenced by — RFC 5971: GIST: General Internet Signalling Transport
Normatively referenced by — RFC 6488: Signed Object Template for the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 7030: Enrollment over Secure Transport
Normatively referenced by — RFC 5415: Control And Provisioning of Wireless Access Points (CAPWAP) Protocol Specification
Normatively referenced by — RFC 7468: Textual Encodings of PKIX, PKCS, and CMS Structures
Normatively referenced by — RFC 8224: Authenticated Identity Management in the Session Initiation Protocol (SIP)
Normatively referenced by — RFC 5922: Domain Certificates in the Session Initiation Protocol (SIP)
Normatively referenced by — RFC 7469: Public Key Pinning Extension for HTTP
Normatively referenced by — RFC 5655: Specification of the IP Flow Information Export (IPFIX) File Format
Normatively referenced by — RFC 6402: Certificate Management over CMS (CMC) Updates
Normatively referenced by — RFC 6810: The Resource Public Key Infrastructure (RPKI) to Router Protocol
Normatively referenced by — RFC 8226: Secure Telephone Identity Credentials: Certificates
Normatively referenced by — RFC 9132: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification
Normatively referenced by — RFC 9640: YANG Data Types and Groupings for Cryptography
Normatively referenced by — RFC 9645: YANG Groupings for TLS Clients and TLS Servers
Normatively referenced by — RFC 6486: Manifests for the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 6489: Certification Authority (CA) Key Rollover in the Resource Public Key Infrastructure (RPKI)
Normatively referenced by — RFC 6920: Naming Things with Hashes
Normatively referenced by — RFC 8310: Usage Profiles for DNS over TLS and DNS over DTLS
Normatively referenced by — RFC 5425: Transport Layer Security (TLS) Transport Mapping for Syslog