RFC 1422

Network Working Group
Request for Comments: 1422
Obsoletes: 1114

S. Kent
BBN
IAB IRTF PSRG, IETF PEM
February 1993

Status of this Memo

This RFC specifies an IAB standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "IAB Official Protocol Standards" for the standardization state and status of this protocol. Distribution of this memo is unlimited.

Acknowledgements

This memo is the outgrowth of a series of meetings of the Privacy and Security Research Group of the Internet Research Task Force (IRTF) and the Privacy-Enhanced Electronic Mail Working Group of the Internet Engineering Task Force (IETF). I would like to thank the members of the PSRG and the PEM WG for their comments and contributions at the meetings which led to the preparation of this document. I also would like to thank contributors to the PEM-DEV mailing list who have provided valuable input which is reflected in this memo.

Table of Contents

• 1. Executive Summary
• 2. Overview of Approach
• 3. Architecture
  • 3.1 Scope and Restrictions
  • 3.2 Relation to X.509 Architecture
  • 3.3 Certificate Definition
    • 3.3.1 Version Number
    • 3.3.2 Serial Number
    • 3.3.3 Signature
    • 3.3.4 Subject Name
    • 3.3.5 Issuer Name
    • 3.3.6 Validity Period
    • 3.3.7 Subject Public Key
  • 3.4 Roles and Responsibilities
    • 3.4.1 Users and User Agents
      • 3.4.1.1 Generating and Protecting Component Pairs
      • 3.4.1.2 User Registration
      • 3.4.1.3 CRL Management
      • 3.4.1.4 Facilitating Interoperation
    • 3.4.2 The Internet Policy Registration Authority (IPRA)
      • 3.4.2.1 PCA Registration
      • 3.4.2.2 Ensuring the Uniqueness of Distinguished Names
      • 3.4.2.3 Accuracy of Distinguished Names
      • 3.4.2.4 Distinguished Name Conventions
      • 3.4.2.5 CRL Management
      • 3.4.2.6 Public Key Algorithm Licensing Issues
    • 3.4.3 Policy Certification Authorities
    • 3.4.4 Certification Authorities
      • 3.4.4.1 Organizational CAs
      • 3.4.4.2 Residential CAs
      • 3.4.4.3 PERSONA CAs
      • 3.4.4.4 CA Responsibilities for CRL Management
  • 3.5 Certificate Revocation
    • 3.5.1 X.509 CRLs
    • 3.5.2 PEM CRL Format
  • 3.6 Certificate Validation
    • 3.6.1 Validation Basics
    • 3.6.2 Display of Certificate Validation Data
    • 3.6.3 Validation Procedure Details
• A. Appendix A: ASN.1 Syntax for Certificates and CRLs
  • A.1 Certificate Syntax
  • A.2 Certificate Revocation List Syntax
• References
• Patent Statement
• Security Considerations
• Author's Address

• Original text document
• Complete HTML RFC (TAR, TGZ, or ZIP format)