Clarification and Enhancement of the CSR Attributes Definition in RFC 7030

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 22
Abstract: This document updates RFC 7030, "Enrollment over Secure Transport" (EST), clarifying how the Certificate Signing Request (CSR) Attributes Response can be used by an EST server to specify both CSR attribute Object Identifiers (OIDs) and CSR attribute values, particularly X.509 extension values, that the server expects the client to include in a subsequent CSR request. RFC 9148 is derived from RFC 7030 and is also updated. RFC 7030 is ambiguous in its specification of the CSR Attributes Response. This has resulted in implementation challenges and implementor confusion because there was no universal understanding of what was specified. This document clarifies the encoding rules. This document also provides a new straightforward approach: using a template for CSR contents that may be partially filled in by the server. This also allows an EST server to specify a subject Distinguished Name (DN).
Publication Date: 2026-01-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9908
Link: https://doi.org/10.17487/RFC9908
Author(s): Michael Richardson
Owen Friel
David von Oheimb
Dan Harkins
Keyword(s): SubjectAltName, SAN, Certificate Extensions, CSR

Latest version of IETF RFC 9908

Document Versions — IETF RFC 9908

▶ IETF RFC 9908 (2026-01-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

OID Repository, "drink(5) [other identifier: favouriteDrink]", OID 0.9.2342.19200300.100.1.5, 4 July 2019, <https://oid-base.com/get/0.9.2342.19200300.100.1.5>. EXTERNAL
Gutmann, P., "Dump ASN", 22 April 2021, <https://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c>. EXTERNAL
IETF RFC 2985 [Active*]
IETF RFC 4211 [Active*]
IETF RFC 5272 [Superseded*]
IETF RFC 5280 [Active, Amended*]
RFC8295 — RFC8295 EXTERNAL
RFC8368 — RFC8368 EXTERNAL
RFC8994 — RFC8994 EXTERNAL
RFC8995 — RFC8995 EXTERNAL
RFC9483 — RFC9483 EXTERNAL
IETF RFC 9810 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9908.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9908, Clarification and Enhancement of the CSR Attributes Definition in RFC 7030. Available at https://doi.org/10.17487/RFC9908

Snippet:

IETF RFC 9908, Clarification and Enhancement of the CSR Attributes Definition in RFC 7030. Available at https://doi.org/10.17487/RFC9908

HTML (ISO 690 compliant)

Preview:

IETF RFC 9908, Clarification and Enhancement of the CSR Attributes Definition in RFC 7030. Available at https://doi.org/10.17487/RFC9908

Snippet:

<span class="citation"><cite>IETF RFC 9908</cite>, Clarification and Enhancement of the CSR Attributes Definition in RFC 7030. Available at <a href="https://doi.org/10.17487/RFC9908" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9908</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9908, Clarification and Enhancement of the CSR Attributes Definition in RFC 7030
doi: 10.17487/RFC9908
url: https://doi.org/10.17487/RFC9908

Snippet:

<li>
<cite id="bib-rfc9908">IETF RFC 9908</cite>, Clarification and Enhancement of the CSR Attributes Definition in RFC 7030
<span class="doi">10.17487/RFC9908</span>
</li>

Referenced By

IETF RFC 9930 [Active*]