Certificate Management over CMS (CMC)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 91
Abstract: This document defines the base syntax for CMC, a Certificate Management protocol using the Cryptographic Message Syntax (CMS). This protocol addresses two immediate needs within the Internet Public Key Infrastructure (PKI) community: CMC also requires the use of the transport document (RFC 10003) and the requirements usage document (RFC 10004) along with this document for a full definition. This document obsoletes RFCs 5272 and 6402.
Publication Date: 2026-07-01
Status Note: Proposed Standard
DOI: 10.17487/RFC10002
Link: https://doi.org/10.17487/RFC10002
Author(s): Joe Mandel
Sean Turner
Keyword(s): PKI, Certificate Management, CMS

Latest version of IETF RFC 10002

Document Versions — IETF RFC 10002

▶ IETF RFC 10002 (2026-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2986 [Active*]
IETF RFC 4211 [Active*]
IETF RFC 5083 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5652 [Active*]
RFC5911 — RFC5911 EXTERNAL
IETF RFC 5912 [Active*]
RFC6268 — RFC6268 EXTERNAL
RFC6955 — RFC6955 EXTERNAL
IETF RFC 8174 [Active*]
T-REC-X.680.2021 — ASN.1 EXTERNAL

Bibliographic Reference(s)

NIST.sp.800-63-4 — PASSWORD EXTERNAL
IANA, "SMI Security for PKIX Module Identifier", <https://www.iana.org/assignments/smi-numbers/>. EXTERNAL
Strenzke, F., "ForgedAttributes: An Existential Forgery Vulnerability of CMS Signatures", Cryptology ePrint Archive, Paper 2023/1801, 22 November 2023, <https://ia.cr/2023/1801>. EXTERNAL
IANA, "SMI Security for PKIX Access Descriptor", <https://www.iana.org/assignments/smi-numbers/>. EXTERNAL
IANA, "SMI Security for PKIX CMC Controls", <https://www.iana.org/assignments/smi-numbers/>. EXTERNAL
IANA, "SMI Security for PKIX Extended Key Purpose", <https://www.iana.org/assignments/smi-numbers/>. EXTERNAL
IANA, "SMI Security for PKIX Algorithms", <https://www.iana.org/assignments/smi-numbers/>. EXTERNAL
IANA, "SMI Security for PKIX CMC Content Types", <https://www.iana.org/assignments/smi-numbers/>. EXTERNAL
IANA, "SMI Security for S/MIME Attributes (1.2.840.113549.1.9.16.2)", <https://www.iana.org/assignments/smi-numbers/>. EXTERNAL
IETF RFC 2631 [Active*]
IETF RFC 2785 [Active*]
IETF RFC 2797 [Superseded*]
IETF RFC 4086 [Active*]
IETF RFC 5272 [Superseded*]
IETF RFC 6402 [Superseded*]
IETF RFC 9629 [Active*]
IETF RFC 10003 [Active*]
IETF RFC 10004 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC10002.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 10002, Certificate Management over CMS (CMC). Available at https://doi.org/10.17487/RFC10002

Snippet:

IETF RFC 10002, Certificate Management over CMS (CMC). Available at https://doi.org/10.17487/RFC10002

HTML (ISO 690 compliant)

Preview:

IETF RFC 10002, Certificate Management over CMS (CMC). Available at https://doi.org/10.17487/RFC10002

Snippet:

<span class="citation"><cite>IETF RFC 10002</cite>, Certificate Management over CMS (CMC). Available at <a href="https://doi.org/10.17487/RFC10002" target="_blank" rel="noopener">https://doi.org/10.17487/RFC10002</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 10002, Certificate Management over CMS (CMC)
doi: 10.17487/RFC10002
url: https://doi.org/10.17487/RFC10002

Snippet:

<li>
<cite id="bib-rfc10002">IETF RFC 10002</cite>, Certificate Management over CMS (CMC)
<span class="doi">10.17487/RFC10002</span>
</li>

Referenced By

IETF RFC 10003 [Active*]
IETF RFC 10004 [Active*]