RFC 6818

"Updates to the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", January 2013

Canonical URL:

http://www.rfc-editor.org/rfc/rfc6818.txt
This document is also available in this non-normative format: PDF.

Status:

PROPOSED STANDARD

Updates:

RFC 5280

Author:

P. Yee

Stream:

IETF

Source:

pkix (sec)

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

This document updates RFC 5280, the "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile". This document changes the set of acceptable encoding methods for the explicitText field of the user notice policy qualifier and clarifies the rules for converting internationalized domain name labels to ASCII. This document also provides some clarifications on the use of self-signed certificates, trust anchors, and some updated security considerations. [STANDARDS-TRACK]

For the definition of Stream, see RFC 4844.