Introduction

Overview

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

• Features

• Architecture

• FAQ

• Changes

RFCs

• RFC 2315: PKCS #7: Cryptographic Message Syntax Version 1.5

• RFC 2459: Internet X.509 Public Key Infrastructure Certificate and CRL Profile

• RFC 2511: Internet X.509 Certificate Request Message Format

• RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP

• RFC 2797: Certificate Management Messages over CMS

• RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

• RFC 4211: Internet X.509 Certificate Request Message Format (CRMF)

• RFC 5272: Certificate Management over CMS (CMC)

• RFC 5273: Certificate Management over CMS (CMC): Transport Protocols

• RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

• RFC 6402: Certificate Management over CMS (CMC) Updates

• RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP

• RFC 6962: Certificate Transparency

• RFC 7030: Enrollment over Secure Transport

• RFC 7292: PKCS #12: Personal Information Exchange Syntax v1.1

• RFC 8295: EST (Enrollment over Secure Transport) Extensions

• RFC 8555: Automatic Certificate Management Environment (ACME)

• RFC 8951: Clarification of Enrollment over Secure Transport (EST): Transfer Encodings and ASN.1

• RFC 9579: Use of Password-Based Message Authentication Code 1 (PBMAC1) in PKCS #12 Syntax

• RFC 9879: Use of Password-Based Message Authentication Code 1 (PBMAC1) in PKCS #12 Syntax

FIPS

• FIPS 140-2: Security Requirements for Cryptographic Modules

• FIPS 140-3: Security Requirements for Cryptographic Modules

• FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard

• FIPS 204: Module-Lattice-Based Digital Signature Standard

See Also

• Public Key Infrastructure with Dogtag

• Release Notes

• Related Projects