RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP

This document specifies a protocol useful in determining the current status of a digital certificate without requiring CRLs. [STANDARDS-TRACK]

Read RFC 2560 on the RFC Editor

Outgoing relationships (4 related RFCs)

Informative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Informative reference — RFC 1738: Uniform Resource Locators (URL)
Informative reference — RFC 2068: Hypertext Transfer Protocol -- HTTP/1.1
Informative reference — RFC 2459: Internet X.509 Public Key Infrastructure Certificate and CRL Profile

Incoming relationships (35 related RFCs)

Updated by, Normatively referenced by — RFC 6277: Online Certificate Status Protocol Algorithm Agility
Obsoleted by, Informatively referenced by — RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Normatively referenced by — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normatively referenced by — RFC 5912: New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)
Normatively referenced by — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Normatively referenced by — RFC 4366: Transport Layer Security (TLS) Extensions
Normatively referenced by — RFC 5216: The EAP-TLS Authentication Protocol
Normatively referenced by — RFC 3546: Transport Layer Security (TLS) Extensions
Normatively referenced by — RFC 5055: Server-Based Certificate Validation Protocol (SCVP)
Normatively referenced by — RFC 5019: The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments
Normatively referenced by — RFC 4738: MIKEY-RSA-R: An Additional Mode of Key Distribution in Multimedia Internet KEYing (MIKEY)
Normatively referenced by — RFC 4806: Online Certificate Status Protocol (OCSP) Extensions to IKEv2
Normatively referenced by — RFC 5698: Data Structure for the Security Suitability of Cryptographic Algorithms (DSSC)
Normatively referenced by — RFC 6216: Example Call Flows Using Session Initiation Protocol (SIP) Security Mechanisms
Normatively referenced by — RFC 6678: Requirements for a Tunnel-Based Extensible Authentication Protocol (EAP) Method
Informatively referenced by — RFC 5652: Cryptographic Message Syntax (CMS)
Informatively referenced by — RFC 4949: Internet Security Glossary, Version 2
Informatively referenced by — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Informatively referenced by — RFC 3281: An Internet Attribute Certificate Profile for Authorization
Informatively referenced by — RFC 4108: Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages
Informatively referenced by — RFC 5755: An Internet Attribute Certificate Profile for Authorization
Informatively referenced by — RFC 6797: HTTP Strict Transport Security (HSTS)
Informatively referenced by — RFC 6962: Certificate Transparency
Informatively referenced by — RFC 7299: Object Identifier Registry for the PKIX Working Group
Informatively referenced by — RFC 6024: Trust Anchor Management Requirements
Informatively referenced by — RFC 6961: The Transport Layer Security (TLS) Multiple Certificate Status Request Extension
Informatively referenced by — RFC 9190: EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3
Informatively referenced by — RFC 3125: Electronic Signature Policies
Informatively referenced by — RFC 4158: Internet X.509 Public Key Infrastructure: Certification Path Building
Informatively referenced by — RFC 4945: The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX
Informatively referenced by — RFC 5126: CMS Advanced Electronic Signatures (CAdES)
Informatively referenced by — RFC 3126: Electronic Signature Formats for long term electronic signatures
Informatively referenced by — RFC 4386: Internet X.509 Public Key Infrastructure Repository Locator Service
Informatively referenced by — RFC 6025: ASN.1 Translation
Informatively referenced by — RFC 5636: Traceable Anonymous Certificate