RFC 5272: Certificate Management over CMS (CMC)
This RFC has been replaced. Do not implement against it for new work — it was formally obsoleted by RFC 10002.
Current document in this lineage: RFC 10002 — Certificate Management over CMS (CMC); RFC 10003 — Certificate Management over CMS (CMC): Transport Protocols; RFC 10004 — Certificate Management over CMS (CMC): Compliance Requirements
In plain English — editorial summary, not part of the RFC
This document defines the base syntax for CMC, a Certificate Management protocol using the Cryptographic Message Syntax (CMS). This protocol addresses two immediate needs within the Internet Public Key Infrastructure (PKI) community: 1. The need for an interface to public key certification products and services based on CMS and PKCS #10 (Public Key Cryptography Standard), and 2. The need for a PKI enrollment protocol for encryption only keys due to algorithm or hardware design. CMC also requires the use of the transport document and the requirements usage document along with this document for a full definition. [STANDARDS-TRACK]
Document record
- Document ID
- RFC5272
- Published
- June 2008
- Authors
- J. Schaad; M. Myers
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- sec
- Pages
- 83
- Also known as
- —
Topics
Standards lineage
This document is one revision in a chain of 8 RFCs, each formally replacing the one before it.
- RFC 2797 (2000)
- RFC 5272 (2008)
- RFC 5273 (2008)
- RFC 5274 (2008)
- RFC 6402 (2011)
- RFC 10002 (2026)
- RFC 10003 (2026)
- RFC 10004 (2026) ✓
Read the full history of Certificate Management over CMS (CMC): Compliance Requirements →
Referenced by
2 later RFCs formally update or obsolete part of this document.
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 4386Internet X.509 Public Key Infrastructure Repository Locator ServiceUpdated
February 2006
- RFC 3820Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate ProfileCurrent
June 2004
- RFC 3280Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) ProfileObsoleted
May 2002
- RFC 3279Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) ProfileUpdated
May 2002
- RFC 3029Internet X.509 Public Key Infrastructure Data Validation and Certification Server ProtocolsCurrent
February 2001
- RFC 2585Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTPCurrent
May 1999
- RFC 10003Certificate Management over CMS (CMC): Transport ProtocolsCurrent
July 2026
- RFC 10004Certificate Management over CMS (CMC): Compliance RequirementsCurrent
July 2026
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?