RFC 5912: New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)

The Public Key Infrastructure using X.509 (PKIX) certificate format, and many associated formats, are expressed using ASN.1. The current ASN.1 modules conform…

Read RFC 5912 on the RFC Editor

Outgoing relationships (13 related RFCs)

Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 3852: Cryptographic Message Syntax (CMS)
Normative reference — RFC 3279: Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Normative reference — RFC 2986: PKCS #10: Certification Request Syntax Specification Version 1.7
Normative reference — RFC 5480: Elliptic Curve Cryptography Subject Public Key Information
Normative reference — RFC 4055: Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4211: Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF)
Normative reference — RFC 5272: Certificate Management over CMS (CMC)
Normative reference — RFC 5911: New ASN.1 Modules for Cryptographic Message Syntax (CMS) and S/MIME
Normative reference — RFC 4210: Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)
Normative reference — RFC 5755: An Internet Attribute Certificate Profile for Authorization
Normative reference — RFC 5055: Server-Based Certificate Validation Protocol (SCVP)

Incoming relationships (50 related RFCs)

Updated by, Informatively referenced by — RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Updated by — RFC 9480: Certificate Management Protocol (CMP) Updates
Updated by, Informatively referenced by — RFC 9810: Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)
Normatively referenced by — RFC 6268: Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX)
Normatively referenced by — RFC 5911: New ASN.1 Modules for Cryptographic Message Syntax (CMS) and S/MIME
Normatively referenced by — RFC 5958: Asymmetric Key Packages
Normatively referenced by — RFC 8226: Secure Telephone Identity Credentials: Certificates
Normatively referenced by — RFC 6010: Cryptographic Message Syntax (CMS) Content Constraints Extension
Normatively referenced by — RFC 9629: Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 6211: Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute
Normatively referenced by — RFC 9881: Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA)
Normatively referenced by — RFC 6277: Online Certificate Status Protocol Algorithm Agility
Normatively referenced by — RFC 7633: X.509v3 Transport Layer Security (TLS) Feature Extension
Normatively referenced by — RFC 10002: Certificate Management over CMS (CMC)
Normatively referenced by — RFC 5913: Clearance Attribute and Authority Clearance Constraints Certificate Extension
Normatively referenced by — RFC 9118: Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates
Normatively referenced by — RFC 9690: Use of the RSA-KEM Algorithm in the Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 9935: Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM)
Normatively referenced by — RFC 5916: Device Owner Attribute
Normatively referenced by — RFC 7894: Alternative Challenge Password Attributes for Enrollment over Secure Transport
Normatively referenced by — RFC 7906: NSA's Cryptographic Message Syntax (CMS) Key Management Attributes
Normatively referenced by — RFC 8696: Using Pre-Shared Key (PSK) in the Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 8951: Clarification of Enrollment over Secure Transport (EST): Transfer Encodings and ASN.1
Normatively referenced by — RFC 9169: New ASN.1 Modules for the Evidence Record Syntax (ERS)
Normatively referenced by — RFC 9688: Use of the SHA3 One-Way Hash Functions in the Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 9802: Use of the HSS and XMSS Hash-Based Signature Algorithms in Internet X.509 Public Key Infrastructure
Normatively referenced by — RFC 9883: An Attribute for Statement of Possession of a Private Key
Normatively referenced by — RFC 9908: Clarification and Enhancement of the CSR Attributes Definition in RFC 7030
Normatively referenced by — RFC 9909: Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Stateless Hash-Based Digital Signature Algorithm (SLH-DSA)
Normatively referenced by — RFC 9925: Unsigned X.509 Certificates
Normatively referenced by — RFC 9999: Remote ATtestation procedureS (RATS) Conceptual Message Wrapper (CMW)
Normatively referenced by — RFC 10031: Media Access Control (MAC) Addresses in X.509 Certificates
Informatively referenced by — RFC 6402: Certificate Management over CMS (CMC) Updates
Informatively referenced by — RFC 7299: Object Identifier Registry for the PKIX Working Group
Informatively referenced by — RFC 6955: Diffie-Hellman Proof-of-Possession Algorithms
Informatively referenced by — RFC 7427: Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
Informatively referenced by — RFC 8994: An Autonomic Control Plane (ACP)
Informatively referenced by — RFC 6210: Experiment: Hash Functions with Parameters in the Cryptographic Message Syntax (CMS) and S/MIME
Informatively referenced by — RFC 9174: Delay-Tolerant Networking TCP Convergence-Layer Protocol Version 4
Informatively referenced by — RFC 8692: Internet X.509 Public Key Infrastructure: Additional Algorithm Identifiers for RSASSA-PSS and ECDSA Using SHAKEs
Informatively referenced by — RFC 6025: ASN.1 Translation
Informatively referenced by — RFC 6664: S/MIME Capabilities for Public Key Definitions
Informatively referenced by — RFC 8708: Use of the HSS/LMS Hash-Based Signature Algorithm in the Cryptographic Message Syntax (CMS)
Informatively referenced by — RFC 9598: Internationalized Email Addresses in X.509 Certificates
Informatively referenced by — RFC 9708: Use of the HSS/LMS Hash-Based Signature Algorithm in the Cryptographic Message Syntax (CMS)
Informatively referenced by — RFC 9763: Related Certificates for Use in Multiple Authentications within a Protocol
Informatively referenced by — RFC 9310: X.509 Certificate Extension for 5G Network Function Types
Informatively referenced by — RFC 9399: Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates
Informatively referenced by — RFC 9608: No Revocation Available for X.509 Public Key Certificates
Informatively referenced by — RFC 9654: Online Certificate Status Protocol (OCSP) Nonce Extension