RFC 9598: Internationalized Email Addresses in X.509 Certificates

In plain English — editorial summary, not part of the RFC

This document defines a new name form for inclusion in the otherName field of an X.509 Subject Alternative Name and Issuer Alternative Name extension that allows a certificate subject to be associated with an internationalized email address. This document updates RFC 5280 and obsoletes RFC 8398.

Document record

Document ID

RFC9598

Published

May 2024

Authors

A. Melnikov; W. Chuang; C. Bonnell

Status

PROPOSED STANDARD

Stream

IETF

Area

sec

Pages

12

Also known as

—

Obsoletes:

RFC 8398

Updates:

RFC 5280

• Read the full RFC text →
• Plain text version
• IETF Datatracker history
• DOI: 10.17487/RFC9598

Topics

• EAI
• PKIX
• email address

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

• RFC 9495Certification Authority Authorization (CAA) Processing for Email AddressesCurrent

  October 2023

• RFC 9802Use of the HSS and XMSS Hash-Based Signature Algorithms in Internet X.509 Public Key InfrastructureCurrent

  June 2025

• RFC 9881Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA)Current

  October 2025

• RFC 9295Clarifications for Ed25519, Ed448, X25519, and X448 Algorithm IdentifiersCurrent

  September 2022

• RFC 9935Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM)Current

  March 2026

• RFC 9216S/MIME Example Keys and CertificatesCurrent

  April 2022

• RFC 9162Certificate Transparency Version 2.0Current

  December 2021

• RFC 8813Clarifications for Elliptic Curve Cryptography Subject Public Key InformationCurrent

  August 2020

Also filed under

• PROPOSED STANDARD
• 2024
• IETF stream
• sec area