RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)

Many application technologies enable secure communication between two entities by means of Internet Public Key Infrastructure Using X.509 (PKIX) certificates…

Read RFC 6125 on the RFC Editor

Outgoing relationships (48 related RFCs)

Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2782: A DNS RR for specifying the location of services (DNS SRV)
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 5891: Internationalized Domain Names in Applications (IDNA): Protocol
Normative reference — RFC 4514: Lightweight Directory Access Protocol (LDAP): String Representation of Distinguished Names
Normative reference — RFC 4985: Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name
Informative reference — RFC 3261: SIP: Session Initiation Protocol
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 2460: Internet Protocol, Version 6 (IPv6) Specification
Informative reference — RFC 791: Internet Protocol
Informative reference — RFC 4301: Security Architecture for the Internet Protocol
Informative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Informative reference — RFC 4033: DNS Security Introduction and Requirements
Informative reference — RFC 2818: HTTP Over TLS
Informative reference — RFC 3501: INTERNET MESSAGE ACCESS PROTOCOL - VERSION 4rev1
Informative reference — RFC 5321: Simple Mail Transfer Protocol
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Informative reference — RFC 3490: Internationalizing Domain Names in Applications (IDNA)
Informative reference — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Informative reference — RFC 3207: SMTP Service Extension for Secure SMTP over Transport Layer Security
Informative reference — RFC 4511: Lightweight Directory Access Protocol (LDAP): The Protocol
Informative reference — RFC 4880: OpenPGP Message Format
Informative reference — RFC 4347: Datagram Transport Layer Security
Informative reference — RFC 5424: The Syslog Protocol
Informative reference — RFC 2595: Using TLS with IMAP, POP3 and ACAP
Informative reference — RFC 3403: Dynamic Delegation Discovery System (DDDS) Part Three: The Domain Name System (DNS) Database
Informative reference — RFC 3958: Domain-Based Application Service Location Using SRV RRs and the Dynamic Delegation Discovery Service (DDDS)
Informative reference — RFC 4741: NETCONF Configuration Protocol
Informative reference — RFC 2459: Internet X.509 Public Key Infrastructure Certificate and CRL Profile
Informative reference — RFC 3920: Extensible Messaging and Presence Protocol (XMPP): Core
Informative reference — RFC 4513: Lightweight Directory Access Protocol (LDAP): Authentication Methods and Security Mechanisms
Informative reference — RFC 4519: Lightweight Directory Access Protocol (LDAP): Schema for User Applications
Informative reference — RFC 5971: GIST: General Internet Signalling Transport
Informative reference — RFC 4343: Domain Name System (DNS) Case Insensitivity Clarification
Informative reference — RFC 4954: SMTP Service Extension for Authentication
Informative reference — RFC 5922: Domain Certificates in the Session Initiation Protocol (SIP)
Informative reference — RFC 5630: The Use of the SIPS URI Scheme in the Session Initiation Protocol (SIP)
Informative reference — RFC 3977: Network News Transfer Protocol (NNTP)
Informative reference — RFC 2830: Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security
Informative reference — RFC 4742: Using the NETCONF Configuration Protocol over Secure SHell (SSH)
Informative reference — RFC 5425: Transport Layer Security (TLS) Transport Mapping for Syslog
Informative reference — RFC 6186: Use of SRV Records for Locating Email Submission/Access Services
Informative reference — RFC 4642: Using Transport Layer Security (TLS) with Network News Transfer Protocol (NNTP)
Informative reference — RFC 5539: NETCONF over Transport Layer Security (TLS)
Informative reference — RFC 5953: Transport Layer Security (TLS) Transport Model for the Simple Network Management Protocol (SNMP)
Informative reference — RFC 6012: Datagram Transport Layer Security (DTLS) Transport Mapping for Syslog

Incoming relationships (60 related RFCs)

Showing 50 of 60 related RFCs.

Obsoleted by, Informatively referenced by — RFC 9525: Service Identity in TLS
Normatively referenced by — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Normatively referenced by — RFC 6749: The OAuth 2.0 Authorization Framework
Normatively referenced by — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normatively referenced by — RFC 7517: JSON Web Key (JWK)
Normatively referenced by — RFC 7285: Application-Layer Traffic Optimization (ALTO) Protocol
Normatively referenced by — RFC 7030: Enrollment over Secure Transport
Normatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Normatively referenced by — RFC 7662: OAuth 2.0 Token Introspection
Normatively referenced by — RFC 7591: OAuth 2.0 Dynamic Client Registration Protocol
Normatively referenced by — RFC 6810: The Resource Public Key Infrastructure (RPKI) to Router Protocol
Normatively referenced by — RFC 9132: Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification
Normatively referenced by — RFC 6837: NERD: A Not-so-novel Endpoint ID (EID) to Routing Locator (RLOC) Database
Normatively referenced by — RFC 8310: Usage Profiles for DNS over TLS and DNS over DTLS
Normatively referenced by — RFC 7589: Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication
Normatively referenced by — RFC 7800: Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)
Normatively referenced by — RFC 8489: Session Traversal Utilities for NAT (STUN)
Normatively referenced by — RFC 8915: Network Time Security for the Network Time Protocol
Normatively referenced by — RFC 6186: Use of SRV Records for Locating Email Submission/Access Services
Normatively referenced by — RFC 6546: Transport of Real-time Inter-network Defense (RID) Messages over HTTP/TLS
Normatively referenced by — RFC 8995: Bootstrapping Remote Secure Key Infrastructure (BRSKI)
Normatively referenced by — RFC 7590: Use of Transport Layer Security (TLS) in the Extensible Messaging and Presence Protocol (XMPP)
Normatively referenced by — RFC 7644: System for Cross-domain Identity Management: Protocol
Normatively referenced by — RFC 7671: The DNS-Based Authentication of Named Entities (DANE) Protocol: Updates and Operational Guidance
Normatively referenced by — RFC 7672: SMTP Security via Opportunistic DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS)
Normatively referenced by — RFC 8210: The Resource Public Key Infrastructure (RPKI) to Router Protocol, Version 1
Normatively referenced by — RFC 8071: NETCONF Call Home and RESTCONF Call Home
Normatively referenced by — RFC 9174: Delay-Tolerant Networking TCP Convergence-Layer Protocol Version 4
Normatively referenced by — RFC 7711: PKIX over Secure HTTP (POSH)
Normatively referenced by — RFC 7808: Time Zone Data Distribution Service
Normatively referenced by — RFC 8689: SMTP Require TLS Option
Normatively referenced by — RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)
Normatively referenced by — RFC 6394: Use Cases and Requirements for DNS-Based Authentication of Named Entities (DANE)
Normatively referenced by — RFC 6638: Scheduling Extensions to CalDAV
Normatively referenced by — RFC 6764: Locating Services for Calendaring Extensions to WebDAV (CalDAV) and vCard Extensions to WebDAV (CardDAV)
Normatively referenced by — RFC 7712: Domain Name Associations (DNA) in the Extensible Messaging and Presence Protocol (XMPP)
Normatively referenced by — RFC 7817: Updated Transport Layer Security (TLS) Server Identity Check Procedure for Email-Related Protocols
Normatively referenced by — RFC 8908: Captive Portal API
Normatively referenced by — RFC 8935: Push-Based Security Event Token (SET) Delivery Using HTTP
Normatively referenced by — RFC 8936: Poll-Based Security Event Token (SET) Delivery Using HTTP
Normatively referenced by — RFC 8952: Captive Portal Architecture
Normatively referenced by — RFC 6595: A Simple Authentication and Security Layer (SASL) and GSS-API Mechanism for the Security Assertion Markup Language (SAML)
Normatively referenced by — RFC 6616: A Simple Authentication and Security Layer (SASL) and Generic Security Service Application Program Interface (GSS-API) Mechanism for OpenID
Normatively referenced by — RFC 6753: A Location Dereference Protocol Using HTTP-Enabled Location Delivery (HELD)
Normatively referenced by — RFC 7592: OAuth 2.0 Dynamic Client Registration Management Protocol
Normatively referenced by — RFC 9289: Towards Remote Procedure Call Encryption by Default
Informatively referenced by — RFC 6614: Transport Layer Security (TLS) Encryption for RADIUS
Informatively referenced by — RFC 6797: HTTP Strict Transport Security (HSTS)
Informatively referenced by — RFC 6121: Extensible Messaging and Presence Protocol (XMPP): Instant Messaging and Presence
Informatively referenced by — RFC 6943: Issues in Identifier Comparison for Security Purposes