title

draft-ietf-cose-cbor-encoded-cert-14 - CBOR Encoded X.509 Certificates (C509 Certificates)

charset

utf-8

X-UA-Compatible

IE=edge

viewport

width=device-width, initial-scale=1

article:section

IETF - Internet Engineering Task Force

og:title

CBOR Encoded X.509 Certificates (C509 Certificates)

og:url

https://datatracker.ietf.org/doc/draft-ietf-cose-cbor-encoded-cert/

og:site_name

IETF Datatracker

og:description

This document specifies a CBOR encoding of X.509 certificates. The resulting certificates are called C509 Certificates. The CBOR encoding supports a large subset of RFC 5280 and all certificates compatible with the RFC 7925, IEEE 802.1AR (DevID), CNSA 1.0, RPKI, GSMA eUICC, and CA/Browser Forum Baseline Requirements profiles. When used to re-encode DER encoded X.509 certificates, the CBOR encoding can in many cases reduce the size of RFC 7925 profiled certificates with over 50% while also significantly reducing memory and code size compared to ASN.1. The CBOR encoded structure can alternatively be signed directly ("natively signed"), which does not require re-encoding for the signature to be verified. The TLSA selectors registry defined in RFC 6698 is extended to include C509 certificates. The document also specifies C509 Certificate Requests, C509 COSE headers, a C509 TLS certificate type, and a C509 file format.

og:type

article

twitter:card

summary_large_image

alternate

/feed/document-changes/draft-ietf-cose-cbor-encoded-cert/

apple-touch-icon

https://static.ietf.org/dt/12.44.0/ietf/images/ietf-logo-nor-180.png

canonical

https://datatracker.ietf.org/doc/draft-ietf-cose-cbor-encoded-cert/

icon

https://static.ietf.org/dt/12.44.0/ietf/images/ietf-logo-nor-32.png

icon

https://static.ietf.org/dt/12.44.0/ietf/images/ietf-logo-nor-16.png