RFC 4398: Storing Certificates in the Domain Name System (DNS)

Cryptographic public keys are frequently published, and their authenticity is demonstrated by certificates. A CERT resource record (RR) is defined so that…

Read RFC 4398 on the RFC Editor

Outgoing relationships (14 related RFCs)

Obsoletes — RFC 2538: Storing Certificates in the Domain Name System (DNS)
Normative reference — RFC 4033: DNS Security Introduction and Requirements
Normative reference — RFC 4034: Resource Records for the DNS Security Extensions
Normative reference — RFC 2822: Internet Message Format
Normative reference — RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2440: OpenPGP Message Format
Normative reference — RFC 3281: An Internet Attribute Certificate Profile for Authorization
Normative reference — RFC 2247: Using Domains in LDAP/X.500 Distinguished Names
Informative reference — RFC 4301: Security Architecture for the Internet Protocol
Informative reference — RFC 2246: The TLS Protocol Version 1.0
Informative reference — RFC 3851: Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1 Message Specification
Informative reference — RFC 4025: A Method for Storing IPsec Keying Material in DNS
Informative reference — RFC 3548: The Base16, Base32, and Base64 Data Encodings
Informative reference — RFC 2693: SPKI Certificate Theory

Incoming relationships (3 related RFCs)

Updated by, Normatively referenced by — RFC 6944: Applicability Statement: DNS Security (DNSSEC) DNSKEY Algorithm Implementation Status
Informatively referenced by — RFC 8078: Managing DS Records from the Parent via CDS/CDNSKEY
Informatively referenced by — RFC 6725: DNS Security (DNSSEC) DNSKEY Algorithm IANA Registry Updates