Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile.

Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., & Polk, W. (2008). Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile.

Type

Report

Intellectual base

Grey literature

Year

2008

Link

https://www.rfc-editor.org/info/rfc5280

Cited from

computer_science, information_theory, public_administration_policy, systems_cybernetics

Cited by

4 citations across 4 artifacts.

Each citation links to the sentence it supports in the citing article.

Primes

• Capability Separation
  • The transfer also moves specific intervention patterns across substrates: rotating issuer keys in cryptography corresponds to re-issuing physical credentials with new anti-counterfeit features in currency, to updating institutional signing keys in credentialing, and to renewing molecular self-marker recognition in immunology; publishing revocation lists corresponds to publishing disbarred professionals, lost or stolen prescription-pad numbers, and counterfeit serial numbers.

    This sourceSpecifies certificate issuance, verification, and revocation lists in PKI.

• Certification
  • The portable token is the X.509 certificate — a signed artifact the browser uses as a substitute for verifying the server's identity itself.

    This sourceSpecifies X.509 certificates, the chain of trust up to a self-signed root CA in the trust store, and certificate revocation lists.

• Green-Beard Effect
  • The false-beard pressure is concrete: a stolen or forged credential is a tag-displayer that does not bear the legitimate cooperative cost, and the coupling-enforcement apparatus is the CA infrastructure plus certificate revocation lists.

    This sourceDefines X.509 certificate-authority infrastructure and CRLs — the apparatus protecting credential validity against stolen or forged credentials.

• Validity-ending Event
  • In software and security it is API deprecations with announced sunset dates, certificate revocation, token expiration, and end-of-life declarations, where a revoked key continues to exist as bytes but is no longer trusted.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Registry ID ref:f5071abc2375 · see in the full table