RFC 6962: Certificate Transparency

This document describes an experimental protocol for publicly logging the existence of Transport Layer Security (TLS) certificates as they are issued or…

Read RFC 6962 on the RFC Editor

Outgoing relationships (8 related RFCs)

Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Informative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Informative reference — RFC 5905: Network Time Protocol Version 4: Protocol and Algorithms Specification
Informative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Informative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Informative reference — RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Informative reference — RFC 4627: The application/json Media Type for JavaScript Object Notation (JSON)

Incoming relationships (8 related RFCs)

Obsoleted by — RFC 9162: Certificate Transparency Version 2.0
Informatively referenced by — RFC 7469: Public Key Pinning Extension for HTTP
Informatively referenced by — RFC 7624: Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement
Informatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Informatively referenced by — RFC 8862: Best Practices for Securing RTP Media Signaled with SIP
Informatively referenced by — RFC 7687: Report from the Strengthening the Internet (STRINT) Workshop
Informatively referenced by — RFC 8336: The ORIGIN HTTP/2 Frame
Informatively referenced by — RFC 9261: Exported Authenticators in TLS