%% You should probably cite rfc9608 instead of this I-D. @techreport{ietf-lamps-norevavail-04, number = {draft-ietf-lamps-norevavail-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-lamps-norevavail/04/}, author = {Russ Housley and Tomofumi Okubo and Joe Mandel}, title = {{No Revocation Available for X.509 Public Key Certificates}}, pagetotal = 10, year = 2024, month = apr, day = 4, abstract = {X.509v3 public key certificates are profiled in RFC 5280. Short- lived certificates are seeing greater use in the Internet. The Certification Authority (CA) that issues these short-lived certificates do not publish revocation information because the certificate lifespan that is shorter than the time needed to detect, report, and distribute revocation information. Some long-lived X.509v3 public key certificates never expire, and they are never revoked. This specification defines the noRevAvail certificate extension so that a relying party can readily determine that the CA does not publish revocation information for the certificate, and it updates the certification path validation algorithm in RFC 5280 to skip revocation checking when the noRevAvail certificate extension is present.}, }