Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 57
- Abstract
- Many application technologies enable secure communication between two entities by means of Internet Public Key Infrastructure Using X.509 (PKIX) certificates in the context of Transport Layer Security (TLS). This document specifies procedures for representing and verifying the identity of application services in such interactions. [STANDARDS-TRACK]
- Publication Date
- 2011-03-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC6125- Link
- https://doi.org/10.17487/RFC6125
- Author(s)
- Peter Saint-AndreJeff Hodges
Latest version of IETF RFC 6125
Document Versions — IETF RFC 6125
-
▶ IETF RFC 6125 (2011-03-01)THIS DOC [SUPERSEDED] [LATEST VERSION]
Superseded by:
- RFC9525 NOT IN REGISTRY
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 2119 [Active*]
- IETF RFC 2782 [Active*]
- IETF RFC 3986 [Active, Amended*]
- IETF RFC 4514 [Active*]
- IETF RFC 4985 [Active*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 5890 [Active*]
- IETF RFC 5891 [Active*]
Bibliographic Reference(s)
- ANSI/INCITS X3.4:1986 (R1997) [Active]
- Marlinspike, M., "New Tricks for Defeating SSL in Practice", BlackHat DC, February 2009, < http://www.blackhat.com/presentations/ bh-dc-09/Marlinspike/ BlackHat-DC-09-Marlinspike- Defeating-SSL.pdf>. EXTERNAL
- CA/Browser Forum, "Guidelines For The Issuance And Management Of Extended Validation Certificates", October 2009, < http://www.cabforum.org/Guidelines_v1_2.pdf >. EXTERNAL
- Sokol, J. and R. Hansen, "HTTPS Can Byte Me", BlackHat Abu Dhabi, November 2010, < https://media.blackhat.com/bh-ad-10/Hansen/ Blackhat-AD-2010-Hansen-Sokol-HTTPS-Can-Byte-Me- slides.pdf >. EXTERNAL
- IETF RFC 791 [Active*]
- IETF RFC 1918 [Active*]
- IETF RFC 1939 [Active*]
- IETF RFC 2459 [Superseded*]
- IETF RFC 2460 [Superseded*]
- IETF RFC 2560 [Superseded*]
- IETF RFC 2595 [Active*]
- IETF RFC 2616 [Superseded*]
- IETF RFC 2818 [Superseded*]
- IETF RFC 2830 [Superseded*]
- IETF RFC 3207 [Active*]
- IETF RFC 3261 [Active*]
- IETF RFC 3403 [Active*]
- IETF RFC 3411 [Active*]
- IETF RFC 3490 [Superseded*]
- IETF RFC 3501 [Superseded*]
- IETF RFC 3920 [Superseded*]
- IETF RFC 3958 [Active*]
- IETF RFC 3977 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4301 [Active, Amended*]
- IETF RFC 4343 [Active*]
- IETF RFC 4347 [Superseded*]
- IETF RFC 4511 [Active*]
- IETF RFC 4513 [Active*]
- IETF RFC 4519 [Active*]
- IETF RFC 4642 [Active*]
- IETF RFC 4741 [Superseded*]
- IETF RFC 4742 [Superseded*]
- IETF RFC 4880 [Superseded*]
- IETF RFC 4949 [Active*]
- IETF RFC 4954 [Active*]
- IETF RFC 5234 [Active, Amended*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5321 [Active*]
- IETF RFC 5424 [Active*]
- IETF RFC 5425 [Active*]
- IETF RFC 5539 [Superseded*]
- IETF RFC 5630 [Active*]
- IETF RFC 5922 [Active*]
- IETF RFC 5953 [Superseded*]
- IETF RFC 5971 [Active*]
- IETF RFC 6012 [Active*]
- IETF RFC 6066 [Active*]
- IETF RFC 6120 [Active*]
- IETF RFC 6186 [Active*]
- T-REC-X.500.2005 — X.500 EXTERNAL
- T-REC-X.501.2005 — X.501 EXTERNAL
- T-REC-X.509.2005 — X.509 EXTERNAL
- T-REC-X.690.2008 — X.690 EXTERNAL
- W3C.WD-wsc-ui.20100309 — WSC-UI EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC6125.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 6125, Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS). Available at https://doi.org/10.17487/RFC6125
Snippet:
IETF RFC 6125, Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS). Available at https://doi.org/10.17487/RFC6125
HTML (ISO 690 compliant)
Preview:
IETF RFC 6125, Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS). Available at https://doi.org/10.17487/RFC6125
Snippet:
<span class="citation"><cite>IETF RFC 6125</cite>, Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS). Available at <a href="https://doi.org/10.17487/RFC6125" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6125</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 6125, Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
doi: 10.17487/RFC6125
url: https://doi.org/10.17487/RFC6125
doi: 10.17487/RFC6125
url: https://doi.org/10.17487/RFC6125
Snippet:
<li> <cite id="bib-rfc6125">IETF RFC 6125</cite>, Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS) <span class="doi">10.17487/RFC6125</span> </li>
Referenced By
- IETF RFC 6120 [Active*]
- IETF RFC 6186 [Active*]
- IETF RFC 6614 [Active*]
- IETF RFC 6698 [Active*]
- IETF RFC 6749 [Active*]
- IETF RFC 6797 [Active*]
- IETF RFC 6943 [Active*]
- IETF RFC 7011 [Active*]
- IETF RFC 7030 [Active*]
- IETF RFC 7515 [Active*]
- IETF RFC 7525 [Superseded*]
- IETF RFC 7589 [Active*]
- IETF RFC 7925 [Active*]
- IETF RFC 8143 [Active*]
- IETF RFC 8915 [Active*]
- IETF RFC 9113 [Active*]
- IETF RFC 9190 [Active*]