Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile
RFC 3820

Approval announcement
Draft of message to be sent after approval:

From: The IESG <>
To: IETF-Announce <>
Cc: Internet Architecture Board <>,
    RFC Editor <>, 
    pkix mailing list <>, 
    pkix chair <>
Subject: Protocol Action: 'Internet X.509 Public Key 
         Infrastructure Proxy Certificate Profile' to Proposed Standard 

The IESG has approved the following document:

- 'Internet X.509 Public Key Infrastructure Proxy Certificate Profile '
   <draft-ietf-pkix-proxy-11.txt> as a Proposed Standard

This document is the product of the Public-Key Infrastructure (X.509) 
Working Group. 

The IESG contact persons are Russ Housley and Tim Polk.

A URL of this Internet-Draft is:

Technical Summary

  This document specifies the certificate profile for Proxy
  Certificates, based on X.509v3 certificate profile in RFC 3280.  The
  term Proxy Certificate is used to describe a certificate that is
  derived from, and signed by, a normal X.509v3 End Entity Public Key
  Certificate or by another Proxy Certificate.

Working Group Summary

  The PKIX Working Group came to consensus on this document.

Protocol Quality

  This document was reviewed by Russell Housley for the IESG.

RFC Editor Note

  On page 17, please correct the forward reference.


    the IANA registry (see Section Error! Reference source not found


    the IANA registry (see Section 7

  Add additional text to the end of the IANA Considerations, replacing
  RFC-TBD with the number assigned to this document, and replacing
  DATE-TBD with the month and year that this document becomes an RFC.


    OID                      Description                Reference
    ---                      -----------                ---------       id-ppl-inheritALL          [RFC RFC-TBD]       id-ppl-independent         [RFC RFC-TBD]


    [RFC-TBD] Tuecke, S., V. Welch, D. Engert, L. Pearlman, M. Thompson,
              "Internet X.509 Public Key Infrastructure Proxy Certificate
              Profile", RFC RFC-TBD, Argonne National Laboratory, National
              Center for Supercomputing Applications, University of
              Southern California/Information Sciences Institute,
              Lawernece Berkeley National Laboratory, DATE-TBD.