Technical Summary
This document specifies the Hash Of Root Key certificate extension.
This certificate extension is carried in the self-signed certificate
for a trust anchor, which is often called a Root Certification
Authority (CA) certificate. This certificate extension unambiguously
identifies the next public key that will be used at some point in the
future as the next Root CA certificate, eventually replacing the
current one.
Working Group Summary
There is consensus for this document in the LAMPS WG.
Document Quality
This extension is part of the specifications that will be used
in at least one new PKI. In addition, the Secure Electronic
Transaction (SET) specification published by MasterCard and VISA
in 1997 includes a very similar certificate extension. The SET
certificate extension has essentially the same semantics, but the
syntax fairly different.
Personnel
Tim Hollebeek is the document shepherd.
Roman Danyliw is the responsible area director.