Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

By R. Housley, W. Polk, W. Ford, D. Solo. Request for Comments, 2002

2,257 citations recorded by the source corpus.

This memo profiles the X.509 v3 certificate and X.509 v2 Certificate Revocation List (CRL) for use in the Internet. An overview of this approach and model are provided as an introduction. The X.509 v3 certificate format is described in detail, with additional information regarding the format and semantics of Internet name forms. Standard certificate extensions are described and two Internet-specific extensions are defined. A set of required certificate extensions is specified. The X.509 v2 CRL format is described in detail, and required extensions are defined. An algorithm for X.509 certification path validation is described. An ASN.1 module and examples are provided in the appendices.

Subfields: Computer Networks and Communications, Electrical and Electronic Engineering

View Paper: https://www.semanticscholar.org/paper/17d8a7797f033e840ed2daf5453ea05d2e90aca2

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Electrical and Electronic Engineering

Citations in the corpus

Security and Privacy for 6G: A Survey on Prospective Technologies and Challenges (2021, methodology): “For privacy enhancement, the centralized PKI like X.509 must accomplish through via a complicated model (e.g., using pseudonym certificate generation and Certificate Revocation List (CRL) [182]).”
A taxonomy of Data Grids for distributed data sharing, management, and processing (2005, background): “RFC 3280: Internet X.509 public key infrastructure certi.cate and certi.cate revocation list pro.le.”
Guided differential testing of certificate validation in SSL/TLS implementations (2015, background): “Each certificate consists of a sequence of three required fields [21]:”
A survey on vehicular cloud computing (2014, positive): “However, CLRs has several drawbacks: the length of list can be very long and the lifetime of certificates can be very short.”
A survey of methods for encrypted traffic classification and analysis (2015, background): “509 certificates chain [16], as shown in the general scheme in Figure 1.”
Why eve and mallory love android: an analysis of android SSL (in)security (2012, background): “Thus, the discussion of related work is divided into two parts: related work concerning Android security and a selection of SSL security work relevant for this paper.”
Named Data Networking (NDN) Project (2010, background): “Prior research in trust management for large-scale deployment of public key cryptography has resulted in two main approaches: hierarchical Public Key Infrastructure (PKI) [19], and peer-level PGP web of trust [87], both with significant usability problems [43, 83].”
Eviction of Misbehaving and Faulty Nodes in Vehicular Networks (2007, background): “Revocation has been considered mostly in the context of the wireline Internet and the design of Public Key Infrastructure (PKI) services [9].”