RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP

This document specifies a protocol useful in determining the current status of a digital certificate without requiring Certificate Revocation Lists (CRLs).…

Read RFC 6960 on the RFC Editor

Outgoing relationships (9 related RFCs)

Updates, Informative reference — RFC 5912: New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)
Obsoletes, Informative reference — RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Obsoletes — RFC 6277: Online Certificate Status Protocol Algorithm Agility
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 3279: Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 4055: Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Informative reference — RFC 4732: Internet Denial-of-Service Considerations
Informative reference — RFC 5019: The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments

Incoming relationships (23 related RFCs)

Updated by, Normatively referenced by — RFC 8954: Online Certificate Status Protocol (OCSP) Nonce Extension
Updated by, Normatively referenced by — RFC 9654: Online Certificate Status Protocol (OCSP) Nonce Extension
Normatively referenced by — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normatively referenced by — RFC 9640: YANG Data Types and Groupings for Cryptography
Normatively referenced by — RFC 9846: The Transport Layer Security (TLS) Protocol Version 1.3
Normatively referenced by — RFC 6961: The Transport Layer Security (TLS) Multiple Certificate Status Request Extension
Normatively referenced by — RFC 7143: Internet Small Computer System Interface (iSCSI) Protocol (Consolidated)
Normatively referenced by — RFC 9190: EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3
Normatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Normatively referenced by — RFC 7146: Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3
Normatively referenced by — RFC 9174: Delay-Tolerant Networking TCP Convergence-Layer Protocol Version 4
Normatively referenced by — RFC 8908: Captive Portal API
Normatively referenced by — RFC 9061: A YANG Data Model for IPsec Flow Protection Based on Software-Defined Networking (SDN)
Normatively referenced by — RFC 9919: The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments
Informatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Informatively referenced by — RFC 8094: DNS over Datagram Transport Layer Security (DTLS)
Informatively referenced by — RFC 7299: Object Identifier Registry for the PKIX Working Group
Informatively referenced by — RFC 8995: Bootstrapping Remote Secure Key Infrastructure (BRSKI)
Informatively referenced by — RFC 8801: Discovering Provisioning Domain Names and Data
Informatively referenced by — RFC 8816: Secure Telephone Identity Revisited (STIR) Out-of-Band Architecture and Use Cases
Informatively referenced by — RFC 8336: The ORIGIN HTTP/2 Frame
Informatively referenced by — RFC 9261: Exported Authenticators in TLS
Informatively referenced by — RFC 9608: No Revocation Available for X.509 Public Key Certificates