Technical Summary
This document specifies an attribute for a statement of possession of
a private key by a certificate subject. As part of X.509 certificate
enrollment, a Certification Authority (CA) typically demands proof
that the subject possesses the private key that corresponds to the
to-be-certified public key. In some cases, a CA might accept a
signed statement from the certificate subject. For example, when a
certificate subject needs separate certificates for signature and key
establishment, a statement that can be validated with the previously
issued signature certificate for the same subject might be adequate
for subsequent issuance of the key establishment certificate.
Working Group Summary
There was broad agreement and little controversy.
Document Quality
There is ASN.1: The ASN.1 in the text was examined by eye, and the ASN.1
module in Appendix A was compiled.
Downrefs which are already in the registry: RFC 2986, RFC 5912
Personnel
The Document Shepherd for this document is Tim Hollebeek. The
Responsible Area Director is Deb Cooley.