RFC 9809
X.509 Certificate Extended Key Usage (EKU) for Configuration, Updates, and Safety-Critical Communication, July 2025
- File formats:
- Also available: XML file for editing
- Status:
- PROPOSED STANDARD
- Authors:
- H. Brockhaus
D. Goltzsche - Stream:
- IETF
- Source:
- lamps (sec)
Cite this RFC: TXT | XML | BibTeX
DOI: https://doi.org/10.17487/RFC9809
Discuss this RFC: Send questions or comments to the mailing list spasm@ietf.org
Other actions: Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 9809
Abstract
RFC 5280 defines the Extended Key Usage (EKU) extension and specifies several extended key purpose identifiers (KeyPurposeIds) for use with that extension in X.509 certificates. This document defines KeyPurposeIds for general-purpose and trust anchor configuration files, for software and firmware update packages, and for safety-critical communication to be included in the EKU extension of X.509 v3 public key certificates.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.