RFC - 2510

Internet X.509 Public Key Infrastructure Certificate Management Protocols

Original:	ftp://ftp.isi.edu/in-notes/rfc2510.txt
Authors:	C. Adams [Entrust Technologies], S. Farrell [SSE]
Date:	March 1999
Category:	Informational
This specification has been !!! obsoleted !!!

---

Obsoleted by:
RFC-4210	Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP)

Referred by:	18 RFC
Refers to:	6 RFC

---

Status

This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards" (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited.

Copyright Notice

Copyright (C) The Internet Society (1999). All Rights Reserved.

Abstract

This document describes the Internet X.509 Public Key Infrastructure (PKI) Certificate Management Protocols. Protocol messages are defined for all relevant aspects of certificate creation and management. Note that "certificate" in this document refers to an X.509v3 Certificate as defined in [COR95, X509-AM].

The key words "MUST", "MUST NOT", "REQUIRED", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document (in uppercase, as shown) are to be interpreted as described in [RFC2119].

Introduction

The layout of this document is as follows:

• Section 1 contains an overview of PKI management;
• Section 2 contains discussion of assumptions and restrictions;
• Section 3 contains data structures used for PKI management messages;
• Section 4 defines the functions that are to be carried out in PKI management by conforming implementations;
• Section 5 describes a simple protocol for transporting PKI messages;
• the Appendices specify profiles for conforming implementations and provide an ASN.1 module containing the syntax for all messages defined in this specification.

---