RFC 9810: Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP)

This document describes the Internet X.509 Public Key Infrastructure (PKI) Certificate Management Protocol (CMP). Protocol messages are defined for X.509v3…

Read RFC 9810 on the RFC Editor

Outgoing relationships (39 related RFCs)

Updates, Informative reference — RFC 5912: New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)
Obsoletes, Informative reference — RFC 4210: Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)
Obsoletes, Informative reference — RFC 9480: Certificate Management Protocol (CMP) Updates
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 3629: UTF-8, a transformation format of ISO 10646
Normative reference — RFC 5652: Cryptographic Message Syntax (CMS)
Normative reference — RFC 5646: Tags for Identifying Languages
Normative reference — RFC 2986: PKCS #10: Certification Request Syntax Specification Version 1.7
Normative reference — RFC 5480: Elliptic Curve Cryptography Subject Public Key Information
Normative reference — RFC 4211: Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF)
Normative reference — RFC 5958: Asymmetric Key Packages
Normative reference — RFC 2985: PKCS #9: Selected Object Classes and Attribute Types Version 2.0
Normative reference — RFC 6402: Certificate Management over CMS (CMC) Updates
Normative reference — RFC 9629: Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS)
Normative reference — RFC 8933: Update to the Cryptographic Message Syntax (CMS) for Algorithm Identifier Protection
Normative reference — RFC 9045: Algorithm Requirements Update to the Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF)
Normative reference — RFC 9481: Certificate Management Protocol (CMP) Algorithms
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Informative reference — RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Informative reference — RFC 4511: Lightweight Directory Access Protocol (LDAP): The Protocol
Informative reference — RFC 6268: Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX)
Informative reference — RFC 1847: Security Multiparts for MIME: Multipart/Signed and Multipart/Encrypted
Informative reference — RFC 2585: Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP
Informative reference — RFC 9162: Certificate Transparency Version 2.0
Informative reference — RFC 2510: Internet X.509 Public Key Infrastructure Certificate Management Protocols
Informative reference — RFC 8572: Secure Zero Touch Provisioning (SZTP)
Informative reference — RFC 7299: Object Identifier Registry for the PKIX Working Group
Informative reference — RFC 8995: Bootstrapping Remote Secure Key Infrastructure (BRSKI)
Informative reference — RFC 9483: Lightweight Certificate Management Protocol (CMP) Profile
Informative reference — RFC 6712: Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP)
Informative reference — RFC 8649: Hash Of Root Key Certificate Extension
Informative reference — RFC 9482: Constrained Application Protocol (CoAP) Transfer for the Certificate Management Protocol
Informative reference — RFC 4212: Alternative Certificate Formats for the Public-Key Infrastructure Using X.509 (PKIX) Certificate Management Protocols
Informative reference — RFC 9733: BRSKI with Alternative Enrollment (BRSKI-AE)
Informative reference — RFC 9811: Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP)

Incoming relationships (3 related RFCs)

Normatively referenced by — RFC 9811: Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP)
Informatively referenced by — RFC 9908: Clarification and Enhancement of the CSR Attributes Definition in RFC 7030
Informatively referenced by — RFC 9965: The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning