No Revocation Available for X.509 Public Key Certificates

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 10
Abstract: X.509v3 public key certificates are profiled in RFC 5280. Short-lived certificates are seeing greater use in the Internet. The Certification Authority (CA) that issues these short-lived certificates do not publish revocation information because the certificate lifespan that is shorter than the time needed to detect, report, and distribute revocation information. Some long-lived X.509v3 public key certificates never expire, and they are never revoked. This specification defines the noRevAvail certificate extension so that a relying party can readily determine that the CA does not publish revocation information for the certificate, and it updates the certification path validation algorithm defined in RFC 5280 so that revocation checking is skipped when the noRevAvail certificate extension is present.
Publication Date: 2024-06-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9608
Link: https://doi.org/10.17487/RFC9608
Author(s): Russ Housley
Tomofumi Okubo
Joe Mandel

Latest version of IETF RFC 9608

Document Versions — IETF RFC 9608

▶ IETF RFC 9608 (2024-06-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 8174 [Active*]
T-REC-X.509-2019.2019 — X.509-2019-TC2 EXTERNAL
T-REC-X.680.2021 — ASN.1 EXTERNAL
T-REC-X.690.2021 — X690 EXTERNAL

Bibliographic Reference(s)

10.1109-IEEESTD.2018.8423794 — IEEE802.1AR EXTERNAL
IETF RFC 2459 [Superseded*]
IETF RFC 3281 [Superseded*]
IETF RFC 3647 [Active*]
IETF RFC 5912 [Active*]
RFC6268 — RFC6268 EXTERNAL
IETF RFC 6960 [Active*]
RFC8555 — RFC8555 EXTERNAL
T-REC-X.509-1988.1988 — X.509-1988 EXTERNAL
T-REC-X.509-1997.1997 — X.509-1997 EXTERNAL
T-REC-X.509-2000.2000 — X.509-2000 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9608.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9608, No Revocation Available for X.509 Public Key Certificates. Available at https://doi.org/10.17487/RFC9608

Snippet:

IETF RFC 9608, No Revocation Available for X.509 Public Key Certificates. Available at https://doi.org/10.17487/RFC9608

HTML (ISO 690 compliant)

Preview:

IETF RFC 9608, No Revocation Available for X.509 Public Key Certificates. Available at https://doi.org/10.17487/RFC9608

Snippet:

<span class="citation"><cite>IETF RFC 9608</cite>, No Revocation Available for X.509 Public Key Certificates. Available at <a href="https://doi.org/10.17487/RFC9608" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9608</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9608, No Revocation Available for X.509 Public Key Certificates
doi: 10.17487/RFC9608
url: https://doi.org/10.17487/RFC9608

Snippet:

<li>
<cite id="bib-rfc9608">IETF RFC 9608</cite>, No Revocation Available for X.509 Public Key Certificates
<span class="doi">10.17487/RFC9608</span>
</li>