%% You should probably cite rfc6717 instead of this I-D. @techreport{hotz-kx509-04, number = {draft-hotz-kx509-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-hotz-kx509/04/}, author = {Henry Hotz and Russ Allbery}, title = {{KX509 Kerberized Certificate Issuance Protocol}}, pagetotal = 14, year = 2012, month = feb, day = 21, abstract = {This document describes a protocol, called kx509, for using Kerberos tickets to acquire X.509 certificates. These certificates may be used for many of the same purposes as X.509 certificates acquired by other means, but if a Kerberos infrastructure already exists then the overhead of using kx509 may be much less. While not (previously) standardized, this protocol is already in use at several large organizations, and certificates issued with this protocol are recognized by the International Grid Trust Federation.}, }