|
1050 | 1050 | </tr></thead> |
1051 | 1051 | <tfoot><tr> |
1052 | 1052 | <td class="left">Benjamin, et al.</td> |
1053 | | -<td class="center">Expires 3 July 2026</td> |
| 1053 | +<td class="center">Expires 4 July 2026</td> |
1054 | 1054 | <td class="right">[Page]</td> |
1055 | 1055 | </tr></tfoot> |
1056 | 1056 | </table> |
|
1063 | 1063 | <dd class="internet-draft">draft-davidben-tls-merkle-tree-certs-latest</dd> |
1064 | 1064 | <dt class="label-published">Published:</dt> |
1065 | 1065 | <dd class="published"> |
1066 | | -<time datetime="2025-12-30" class="published">30 December 2025</time> |
| 1066 | +<time datetime="2025-12-31" class="published">31 December 2025</time> |
1067 | 1067 | </dd> |
1068 | 1068 | <dt class="label-intended-status">Intended Status:</dt> |
1069 | 1069 | <dd class="intended-status">Standards Track</dd> |
1070 | 1070 | <dt class="label-expires">Expires:</dt> |
1071 | | -<dd class="expires"><time datetime="2026-07-03">3 July 2026</time></dd> |
| 1071 | +<dd class="expires"><time datetime="2026-07-04">4 July 2026</time></dd> |
1072 | 1072 | <dt class="label-authors">Authors:</dt> |
1073 | 1073 | <dd class="authors"> |
1074 | 1074 | <div class="author"> |
@@ -1128,7 +1128,7 @@ <h2 id="name-status-of-this-memo"> |
1128 | 1128 | time. It is inappropriate to use Internet-Drafts as reference |
1129 | 1129 | material or to cite them other than as "work in progress."<a href="#section-boilerplate.1-3" class="pilcrow">¶</a></p> |
1130 | 1130 | <p id="section-boilerplate.1-4"> |
1131 | | - This Internet-Draft will expire on 3 July 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
| 1131 | + This Internet-Draft will expire on 4 July 2026.<a href="#section-boilerplate.1-4" class="pilcrow">¶</a></p> |
1132 | 1132 | </section> |
1133 | 1133 | </div> |
1134 | 1134 | <div id="copyright"> |
@@ -4252,7 +4252,7 @@ <h3 id="name-certificate-format"> |
4252 | 4252 | <a href="#section-6.1" class="section-number selfRef">6.1. </a><a href="#name-certificate-format" class="section-name selfRef">Certificate Format</a> |
4253 | 4253 | </h3> |
4254 | 4254 | <p id="section-6.1-1">The information is encoded in an X.509 Certificate <span>[<a href="#RFC5280" class="cite xref">RFC5280</a>]</span> as follows:<a href="#section-6.1-1" class="pilcrow">¶</a></p> |
4255 | | -<p id="section-6.1-2">The TBSCertificate's <code>version</code>, <code>issuer</code>, <code>validity</code>, <code>subject</code>, <code>issuerUniqueID</code>, <code>subjectUniqueID</code>, and <code>extensions</code> MUST be equal to the corresponding fields of the TBSCertificateLogEntry. If any of <code>issuerUniqueID</code>, ``subjectUniqueID<code>, or </code>extensions<code> is absent in the TBSCertificateLogEntry, the corresponding field MUST be absent in the TBSCertificate. Per {{log-entries}}, this means </code>issuer` MUST be the issuance log's log ID as an X.509 distinguished name, as described in <a href="#log-ids" class="auto internal xref">Section 5.2</a>.<a href="#section-6.1-2" class="pilcrow">¶</a></p> |
| 4255 | +<p id="section-6.1-2">The TBSCertificate's <code>version</code>, <code>issuer</code>, <code>validity</code>, <code>subject</code>, <code>issuerUniqueID</code>, <code>subjectUniqueID</code>, and <code>extensions</code> MUST be equal to the corresponding fields of the TBSCertificateLogEntry. If any of <code>issuerUniqueID</code>, <code>subjectUniqueID</code>, or <code>extensions</code> is absent in the TBSCertificateLogEntry, the corresponding field MUST be absent in the TBSCertificate. Per <a href="#log-entries" class="auto internal xref">Section 5.3</a>, this means <code>issuer</code> MUST be the issuance log's log ID as an X.509 distinguished name, as described in <a href="#log-ids" class="auto internal xref">Section 5.2</a>.<a href="#section-6.1-2" class="pilcrow">¶</a></p> |
4256 | 4256 | <p id="section-6.1-3">The TBSCertificate's <code>serialNumber</code> MUST contain the zero-based index of the TBSCertificateLogEntry in the log. <span><a href="https://rfc-editor.org/rfc/rfc5280#section-4.1.2.2" class="relref">Section 4.1.2.2</a> of [<a href="#RFC5280" class="cite xref">RFC5280</a>]</span> forbids zero as a serial number, but <a href="#log-entries" class="auto internal xref">Section 5.3</a> defines a <code>null_entry</code> type for use in entry zero, so the index will be positive. This encoding is intended to avoid implementation errors by having the serial numbers and indices off by one.<a href="#section-6.1-3" class="pilcrow">¶</a></p> |
4257 | 4257 | <p id="section-6.1-4">The TBSCertificate's <code>subjectPublicKeyInfo</code> contains the specified public key. Its hash MUST match the TBSCertificateLogEntry's <code>subjectPublicKeyInfoHash</code>.<a href="#section-6.1-4" class="pilcrow">¶</a></p> |
4258 | 4258 | <p id="section-6.1-5">The TBSCertificate's <code>signature</code> and the Certificate's <code>signatureAlgorithm</code> MUST contain an AlgorithmIdentifier whose <code>algorithm</code> is id-alg-mtcProof, defined below, and whose <code>parameters</code> is omitted.<a href="#section-6.1-5" class="pilcrow">¶</a></p> |
|
0 commit comments