X.509 Certificate General-Purpose Extended Key Usage (EKU) for Document Signing, December 2022
- File formats:
- Also available: XML file for editing
- PROPOSED STANDARD
- T. Ito
- lamps (sec)
Discuss this RFC: Send questions or comments to the mailing list firstname.lastname@example.org
RFC 5280 specifies several extended key purpose identifiers (KeyPurposeIds) for X.509 certificates. This document defines a general-purpose Document-Signing KeyPurposeId for inclusion in the Extended Key Usage (EKU) extension of X.509 public key certificates. Document-Signing applications may require that the EKU extension be present and that a Document-Signing KeyPurposeId be indicated in order for the certificate to be acceptable to that Document-Signing application.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.