Certificate Transparency Version 2.0
Metadata
- Publisher
- IETF
- Doc Type
- Experimental
- Pages
- 53
- Abstract
- This document describes version 2.0 of the Certificate Transparency (CT) protocol for publicly logging the existence of Transport Layer Security (TLS) server certificates as they are issued or observed, in a manner that allows anyone to audit certification authority (CA) activity and notice the issuance of suspect certificates as well as to audit the certificate logs themselves. The intent is that eventually clients would refuse to honor certificates that do not appear in a log, effectively forcing CAs to add all issued certificates to the logs. This document obsoletes RFC 6962. It also specifies a new TLS extension that is used to send various CT log artifacts. Logs are network services that implement the protocol operations for submissions and queries that are defined in this document.
- Publication Date
- 2021-12-01
- Status Note
- Experimental
- DOI
10.17487/RFC9162- Link
- https://doi.org/10.17487/RFC9162
- Author(s)
- Ben LaurieEran MesseriRob Stradling
- Keyword(s)
- PKIX, TLS, Web PKI, Web Browser
Latest version of IETF RFC 9162
Document Versions — IETF RFC 9162
-
▶ IETF RFC 9162 (2021-12-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IEEE Std 1003.1:2008 [Superseded]
- NIST FIPS 186-4 [Active]
- IETF RFC 2119 [Active*]
- IETF RFC 3553 [Active*]
- IETF RFC 3986 [Active, Amended*]
- IETF RFC 4648 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 5652 [Active*]
- IETF RFC 6066 [Active*]
- IETF RFC 6234 [Active*]
- IETF RFC 6960 [Active*]
- IETF RFC 6979 [Active*]
- IETF RFC 7231 [Superseded*]
- RFC7633 — RFC7633 EXTERNAL
- IETF RFC 7807 [Superseded*]
- IETF RFC 8032 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8259 [Active*]
- IETF RFC 8391 [Active*]
- IETF RFC 8446 [Superseded*]
- T-REC-X.690.2021 — X690 EXTERNAL
- W3C.SPSD-html401.20180327 — HTML401 EXTERNAL
Bibliographic Reference(s)
- CA/Browser Forum, "Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates", Version 1.7.3, October 2020, <https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.7.3.pdf>. EXTERNAL
- The Chromium Projects, "Chromium Log Metadata JSON Schema", <https://www.gstatic.com/ct/log_list/log_list_schema.json>. EXTERNAL
- Crosby, S. and D. Wallach, "Efficient Data Structures for Tamper-Evident Logging", Proceedings of the 18th USENIX Security Symposium, Montreal, August 2009, <http://static.usenix.org/event/sec09/tech/full_papers/crosby.pdf>. EXTERNAL
- The Chromium Projects, "Chromium Certificate Transparency Policy", <https://googlechrome.github.io/CertificateTransparency/ct_policy.html>. EXTERNAL
- The Chromium Projects, "Chromium Certificate Transparency Log Policy", <https://googlechrome.github.io/CertificateTransparency/log_policy.html>. EXTERNAL
- IETF RFC 5912 [Active*]
- RFC6268 — RFC6268 EXTERNAL
- IETF RFC 6962 [Superseded*]
- IETF RFC 8126 [Active*]
- IETF RFC 8820 [Active*]
- T-REC-X.680.2021 — ASN.1 EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9162.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9162, Certificate Transparency Version 2.0. Available at https://doi.org/10.17487/RFC9162
Snippet:
IETF RFC 9162, Certificate Transparency Version 2.0. Available at https://doi.org/10.17487/RFC9162
HTML (ISO 690 compliant)
Preview:
IETF RFC 9162, Certificate Transparency Version 2.0. Available at https://doi.org/10.17487/RFC9162
Snippet:
<span class="citation"><cite>IETF RFC 9162</cite>, Certificate Transparency Version 2.0. Available at <a href="https://doi.org/10.17487/RFC9162" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9162</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9162, Certificate Transparency Version 2.0
doi: 10.17487/RFC9162
url: https://doi.org/10.17487/RFC9162
doi: 10.17487/RFC9162
url: https://doi.org/10.17487/RFC9162
Snippet:
<li> <cite id="bib-rfc9162">IETF RFC 9162</cite>, Certificate Transparency Version 2.0 <span class="doi">10.17487/RFC9162</span> </li>
Referenced By
- IETF RFC 9325 [Active*]
- IETF RFC 9810 [Active*]
- IETF RFC 9846 [Active*]