Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

By Dave Cooper, S. Santesson, Stephen Farrell, S. Boeyen, R. Housley, W. Polk. Request for Comments, 2008

821 citations recorded by the source corpus.

Subfields: Electrical and Electronic Engineering, Information Systems

View Paper: https://www.semanticscholar.org/paper/e10367287aaf50704126864bebc8afb572321252

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Electrical and Electronic Engineering

In Information Systems

Citations in the corpus

Keystone: an open framework for architecting trusted execution environments (2020, background): “Key distribution [15], revocation [46], attestation services [49], and anonymous attestation [26] are orthogonal challenges.”
The most dangerous code in the world: validating SSL certificates in non-browser software (2012, neutral): “The complete algorithm for validating X.509 certiﬁcates can be found in RFC 5280 [15] and RFC 2818 [14].”
Eviction of Misbehaving and Faulty Nodes in Vehicular Networks (2007, background): “The road-side infrastructure can act as the gateway of the CA to the network, distributing the latest Certificate Revocation Lists (CRLs) [9].”
Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations (2014, methodology): “We discuss the latter vulnerability in more detail in Section VIII.”
NEZHA: Efficient Domain-Independent Differential Testing (2017, background): “1) LibreSSL - Incorrect parsing of time ﬁeld types: The RFC standards for X.509 certiﬁcates restrict the Time ﬁelds to only two forms, namely the ASN.1 representations of UTCTime ( YYMMDDHHMMSSZ ) and GeneralizedTime ( YYYYMMDDHHMMSSZ ) [15] which are 13 and 15 characters wide respectively.”
Non-commercial Research and Educational Use including without Limitation Use in Instruction at Your Institution, Sending It to Specific Colleagues That You Know, and Providing a Copy to Your Institution's Administrator. All Other Uses, Reproduction and Distribution, including without Limitation Comm (2005, neutral): “…in a uniaxial nematic liquid crystal is given by: H ¼ X l m l I Z;l þ X l<m J lm I l Á I m þ X l<m D lm ð3I Z;l I Z;m À I l Á I m Þ ð1Þ where m l is the resonance frequency of nucleus l and J lm and D lm are the indirect spin–spin and the direct dipole–dipole couplings between nuclei l and m.”
Flip Feng Shui: Hammering a Needle in the Software Stack (2016, background): “509 are automatically integrity checked as certificates are always signed [17].”
Guided differential testing of certificate validation in SSL/TLS implementations (2015, methodology): “Developers can also make minor mistakes, such as misunderstanding the SSL/TLS application program interfaces (APIs), using insecure middleware or libraries, and breaking/disabling certiﬁcate validation [28].”