metasystema.org
ObsoletedPROPOSED STANDARDIETF stream

RFC 9480: Certificate Management Protocol (CMP) Updates

This RFC has been replaced. Do not implement against it for new work — it was formally obsoleted by RFC 9810, RFC 9811.

Current document in this lineage: RFC 9810 — Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP); RFC 9811 — Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP)

In plain English — editorial summary, not part of the RFC

This document contains a set of updates to the syntax of Certificate Management Protocol (CMP) version 2 and its HTTP transfer mechanism. This document updates RFCs 4210, 5912, and 6712. The aspects of CMP updated in this document are using EnvelopedData instead of EncryptedValue, clarifying the handling of p10cr messages, improving the crypto agility, as well as adding new general message types, extended key usages to identify certificates for use with CMP, and well-known URI path segments. CMP version 3 is introduced to enable signaling support of EnvelopedData instead of EncryptedValue and signal the use of an explicit hash AlgorithmIdentifier in certConf messages, as far as needed.

Document record

Document ID
RFC9480
Published
November 2023
Authors
H. Brockhaus; D. von Oheimb; J. Gray
Status
PROPOSED STANDARD
Stream
IETF
Area
sec
Pages
55
Also known as
—
Obsoleted by:
RFC 9810, RFC 9811
Updates:
RFC 4210, RFC 5912, RFC 6712

Topics

Standards lineage

This document is one revision in a chain of 6 RFCs, each formally replacing the one before it.

  1. RFC 2510 (1999)
  2. RFC 4210 (2005)
  3. RFC 6712 (2012)
  4. RFC 9480 (2023)
  5. RFC 9810 (2025)
  6. RFC 9811 (2025) ✓

Read the full history of Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP) →

Referenced by

2 later RFCs formally update or obsolete part of this document.

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

Also filed under

About this page

The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.

Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.

Data sources · Editorial policy · Report a correction · What is an RFC?

canonical URL: /rfc/9480-certificate-management-protocol-cmp-updates