%% You should probably cite rfc9118 instead of this I-D. @techreport{ietf-stir-enhance-rfc8226-00, number = {draft-ietf-stir-enhance-rfc8226-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-stir-enhance-rfc8226/00/}, author = {Russ Housley}, title = {{Enhanced JWT Claim Constraints for STIR Certificates}}, pagetotal = 10, year = 2021, month = feb, day = 15, abstract = {RFC 8226 provides a certificate extension to constrain the JWT claims that can be included in the PASSporT as defined in RFC 8225. If the signer includes a JWT claim outside the constraint boundaries, then the recipient will reject the entire PASSporT. This document defines additional ways that the JWT claims can be constrained.}, }