Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 151
- Abstract
- This memo profiles the X.509 v3 certificate and X.509 v2 certificate revocation list (CRL) for use in the Internet. An overview of this approach and model is provided as an introduction. The X.509 v3 certificate format is described in detail, with additional information regarding the format and semantics of Internet name forms. Standard certificate extensions are described and two Internet-specific extensions are defined. A set of required certificate extensions is specified. The X.509 v2 CRL format is described in detail along with standard and Internet-specific extensions. An algorithm for X.509 certification path validation is described. An ASN.1 module and examples are provided in the appendices. [STANDARDS-TRACK]
- Publication Date
- 2008-05-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC5280- Link
- https://doi.org/10.17487/RFC5280
- Author(s)
- David CooperStefan SantessonStephen FarrellSharon BoeyenRuss HousleyTim Polk
- Keyword(s)
- X.509, Certificate Extensions
Latest version of IETF RFC 5280
Document Versions — IETF RFC 5280
-
▶ IETF RFC 5280 (2008-05-01)THIS DOC [ACTIVE] [AMENDED] [LATEST VERSION]
Amended by:
- IETF RFC 6818 [Active*]
- IETF RFC 8398 [Superseded*]
- IETF RFC 8399 [Superseded*]
- RFC9549 NOT IN REGISTRY
- RFC9598 NOT IN REGISTRY
- RFC9608 NOT IN REGISTRY
- RFC9618 NOT IN REGISTRY
- RFC9925 NOT IN REGISTRY
- RFC10007 NOT IN REGISTRY
Normative Reference(s)
- ISO 8824-1:2002 (ITU-T X.680) [Withdrawn]
- ISO 8825-1:2002 [Withdrawn]
- IETF RFC 791 [Active*]
- IETF RFC 1034 [Active*]
- IETF RFC 1123 [Active*]
- IETF RFC 2119 [Active*]
- IETF RFC 2460 [Superseded*]
- IETF RFC 2585 [Active*]
- IETF RFC 2616 [Superseded*]
- IETF RFC 2797 [Superseded*]
- IETF RFC 2821 [Superseded*]
- IETF RFC 3454 [Superseded*]
- IETF RFC 3490 [Superseded*]
- IETF RFC 3629 [Active*]
- IETF RFC 3986 [Active, Amended*]
- IETF RFC 3987 [Active*]
- IETF RFC 4516 [Active*]
- IETF RFC 4518 [Active*]
- IETF RFC 4523 [Active*]
- IETF RFC 4632 [Active*]
Bibliographic Reference(s)
- ANSI.X9.55.1997 — X9.55 EXTERNAL
- ISO.8824-4.2002 — 11 EXTERNAL
- ISO/IEC 8859-1:1998 [Active]
- ISO.9594-1.2005 — X.500 EXTERNAL
- ISO.9594-2.2005 — X.501 EXTERNAL
- ISO.9594-6.2005 — X.520 EXTERNAL
- ISO.9594-8.2005 — X.509 EXTERNAL
- ISO.9834-1.2005 — X.660 EXTERNAL
- ISO 10646:2003 [Withdrawn]
- Davis, M. and M. Duerst, "Unicode Standard Annex #15: Unicode Normalization Forms", October 2006, < http://www.unicode.org/reports/tr15/ >. EXTERNAL
- IETF RFC 1422 [Active*]
- IETF RFC 2044 [Superseded*]
- IETF RFC 2277 [Active*]
- IETF RFC 2279 [Superseded*]
- IETF RFC 2459 [Superseded*]
- IETF RFC 2560 [Superseded*]
- IETF RFC 2985 [Active*]
- IETF RFC 3161 [Active*]
- IETF RFC 3279 [Active*]
- IETF RFC 3280 [Superseded*]
- IETF RFC 4055 [Active, Amended*]
- IETF RFC 4120 [Active*]
- IETF RFC 4210 [Superseded*]
- IETF RFC 4325 [Superseded*]
- IETF RFC 4491 [Active*]
- IETF RFC 4510 [Active*]
- IETF RFC 4512 [Active*]
- IETF RFC 4514 [Active*]
- IETF RFC 4519 [Active*]
- IETF RFC 4630 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5280.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5280, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. Available at https://doi.org/10.17487/RFC5280
Snippet:
IETF RFC 5280, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. Available at https://doi.org/10.17487/RFC5280
HTML (ISO 690 compliant)
Preview:
IETF RFC 5280, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. Available at https://doi.org/10.17487/RFC5280
Snippet:
<span class="citation"><cite>IETF RFC 5280</cite>, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. Available at <a href="https://doi.org/10.17487/RFC5280" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5280</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5280, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
doi: 10.17487/RFC5280
url: https://doi.org/10.17487/RFC5280
doi: 10.17487/RFC5280
url: https://doi.org/10.17487/RFC5280
Snippet:
<li> <cite id="bib-rfc5280">IETF RFC 5280</cite>, Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile <span class="doi">10.17487/RFC5280</span> </li>
Referenced By
- IETF RFC 5281 [Active*]
- IETF RFC 5406 [Active*]
- IETF RFC 5415 [Active*]
- IETF RFC 5425 [Active*]
- IETF RFC 5480 [Active*]
- IETF RFC 5539 [Superseded*]
- IETF RFC 5652 [Active*]
- IETF RFC 5734 [Active*]
- IETF RFC 5758 [Active*]
- IETF RFC 5878 [Active*]
- IETF RFC 5912 [Active*]
- IETF RFC 5914 [Active*]
- IETF RFC 5922 [Active*]
- IETF RFC 5929 [Active*]
- IETF RFC 5934 [Active*]
- IETF RFC 5937 [Active*]
- IETF RFC 5953 [Superseded*]
- IETF RFC 5971 [Active*]
- IETF RFC 5996 [Superseded*]
- IETF RFC 6012 [Active*]
- IETF RFC 6024 [Active*]
- IETF RFC 6066 [Active*]
- IETF RFC 6091 [Active*]
- IETF RFC 6120 [Active*]
- IETF RFC 6125 [Superseded*]
- IETF RFC 6277 [Superseded*]
- IETF RFC 6353 [Active*]
- IETF RFC 6530 [Active*]
- IETF RFC 6532 [Active*]
- IETF RFC 6614 [Active*]
- IETF RFC 6698 [Active*]
- IETF RFC 6733 [Active*]
- IETF RFC 6750 [Active*]
- IETF RFC 6797 [Active*]
- IETF RFC 6818 [Active*]
- IETF RFC 6885 [Active*]
- IETF RFC 6916 [Active*]
- IETF RFC 6920 [Active*]
- IETF RFC 6943 [Active*]
- IETF RFC 6960 [Active*]
- IETF RFC 6961 [Superseded*]
- IETF RFC 6962 [Superseded*]
- IETF RFC 6979 [Active*]
- IETF RFC 7030 [Active*]
- IETF RFC 7170 [Superseded*]
- IETF RFC 7250 [Active*]
- IETF RFC 7252 [Active*]
- IETF RFC 7296 [Active*]
- IETF RFC 7515 [Active*]
- IETF RFC 7525 [Superseded*]
- IETF RFC 7585 [Active*]
- IETF RFC 7589 [Active*]
- IETF RFC 7593 [Active*]
- IETF RFC 7696 [Active*]
- IETF RFC 7925 [Active*]
- IETF RFC 8040 [Active*]
- IETF RFC 8143 [Active*]
- IETF RFC 8398 [Superseded*]
- IETF RFC 8399 [Superseded*]
- IETF RFC 8446 [Superseded*]
- IETF RFC 8915 [Active*]
- IETF RFC 9190 [Active*]
- IETF RFC 9191 [Active*]