<?xml version='1.0' encoding='utf-8'?>
<rfc xmlns:xi="http://www.w3.org/2001/XInclude" version="3" category="info" consensus="true" docName="draft-ietf-lamps-samples-08" indexInclude="true" ipr="trust200902" number="9216" prepTime="2022-04-21T11:53:11" scripts="Common,Latin" sortRefs="true" submissionType="IETF" symRefs="true" tocDepth="3" tocInclude="true" xml:lang="en">
  <link href="https://datatracker.ietf.org/doc/draft-ietf-lamps-samples-08" rel="prev"/>
  <link href="https://dx.doi.org/10.17487/rfc9216" rel="alternate"/>
  <link href="urn:issn:2070-1721" rel="alternate"/>
  <front>
    <title abbrev="S/MIME">S/MIME Example Keys and Certificates</title>
    <seriesInfo name="RFC" value="9216" stream="IETF"/>
    <author initials="D. K." surname="Gillmor" fullname="Daniel Kahn Gillmor" role="editor">
      <organization abbrev="ACLU" showOnFrontPage="true">American Civil Liberties Union</organization>
      <address>
        <postal>
          <street>125 Broad St.</street>
          <city>New York</city>
          <region>NY</region>
          <code>10004</code>
          <country>United States of America</country>
        </postal>
        <email>dkg@fifthhorseman.net</email>
      </address>
    </author>
    <date month="04" year="2022"/>
    <area>sec</area>
    <workgroup>lamps</workgroup>
    <keyword>pkix</keyword>
    <keyword>encryption</keyword>
    <keyword>security</keyword>
    <keyword>authentication</keyword>
    <keyword>S/MIME</keyword>
    <keyword>smime</keyword>
    <keyword>email</keyword>
    <keyword>mail</keyword>
    <keyword>confidentiality</keyword>
    <keyword>certificate</keyword>
    <keyword>pkcs8</keyword>
    <keyword>pkcs #12</keyword>
    <keyword>x509</keyword>
    <keyword>"test vector"</keyword>
    <abstract pn="section-abstract">
      <t indent="0" pn="section-abstract-1">The S/MIME development community benefits from sharing samples of signed or encrypted data. This document facilitates such collaboration by defining a small set of X.509v3 certificates and keys for use when generating such samples.</t>
    </abstract>
    <boilerplate>
      <section anchor="status-of-memo" numbered="false" removeInRFC="false" toc="exclude" pn="section-boilerplate.1">
        <name slugifiedName="name-status-of-this-memo">Status of This Memo</name>
        <t indent="0" pn="section-boilerplate.1-1">
            This document is not an Internet Standards Track specification; it is
            published for informational purposes.  
        </t>
        <t indent="0" pn="section-boilerplate.1-2">
            This document is a product of the Internet Engineering Task Force
            (IETF).  It represents the consensus of the IETF community.  It has
            received public review and has been approved for publication by the
            Internet Engineering Steering Group (IESG).  Not all documents
            approved by the IESG are candidates for any level of Internet
            Standard; see Section 2 of RFC 7841. 
        </t>
        <t indent="0" pn="section-boilerplate.1-3">
            Information about the current status of this document, any
            errata, and how to provide feedback on it may be obtained at
            <eref target="https://www.rfc-editor.org/info/rfc9216" brackets="none"/>.
        </t>
      </section>
      <section anchor="copyright" numbered="false" removeInRFC="false" toc="exclude" pn="section-boilerplate.2">
        <name slugifiedName="name-copyright-notice">Copyright Notice</name>
        <t indent="0" pn="section-boilerplate.2-1">
            Copyright (c) 2022 IETF Trust and the persons identified as the
            document authors. All rights reserved.
        </t>
        <t indent="0" pn="section-boilerplate.2-2">
            This document is subject to BCP 78 and the IETF Trust's Legal
            Provisions Relating to IETF Documents
            (<eref target="https://trustee.ietf.org/license-info" brackets="none"/>) in effect on the date of
            publication of this document. Please review these documents
            carefully, as they describe your rights and restrictions with
            respect to this document. Code Components extracted from this
            document must include Revised BSD License text as described in
            Section 4.e of the Trust Legal Provisions and are provided without
            warranty as described in the Revised BSD License.
        </t>
      </section>
    </boilerplate>
    <toc>
      <section anchor="toc" numbered="false" removeInRFC="false" toc="exclude" pn="section-toc.1">
        <name slugifiedName="name-table-of-contents">Table of Contents</name>
        <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1">
          <li pn="section-toc.1-1.1">
            <t indent="0" keepWithNext="true" pn="section-toc.1-1.1.1"><xref derivedContent="1" format="counter" sectionFormat="of" target="section-1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-introduction">Introduction</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.1.2">
              <li pn="section-toc.1-1.1.2.1">
                <t indent="0" keepWithNext="true" pn="section-toc.1-1.1.2.1.1"><xref derivedContent="1.1" format="counter" sectionFormat="of" target="section-1.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-terminology">Terminology</xref></t>
              </li>
              <li pn="section-toc.1-1.1.2.2">
                <t indent="0" keepWithNext="true" pn="section-toc.1-1.1.2.2.1"><xref derivedContent="1.2" format="counter" sectionFormat="of" target="section-1.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-prior-work">Prior Work</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.2">
            <t indent="0" pn="section-toc.1-1.2.1"><xref derivedContent="2" format="counter" sectionFormat="of" target="section-2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-background">Background</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.2.2">
              <li pn="section-toc.1-1.2.2.1">
                <t indent="0" pn="section-toc.1-1.2.2.1.1"><xref derivedContent="2.1" format="counter" sectionFormat="of" target="section-2.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-certificate-usage">Certificate Usage</xref></t>
              </li>
              <li pn="section-toc.1-1.2.2.2">
                <t indent="0" pn="section-toc.1-1.2.2.2.1"><xref derivedContent="2.2" format="counter" sectionFormat="of" target="section-2.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-certificate-expiration">Certificate Expiration</xref></t>
              </li>
              <li pn="section-toc.1-1.2.2.3">
                <t indent="0" pn="section-toc.1-1.2.2.3.1"><xref derivedContent="2.3" format="counter" sectionFormat="of" target="section-2.3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-certificate-revocation">Certificate Revocation</xref></t>
              </li>
              <li pn="section-toc.1-1.2.2.4">
                <t indent="0" pn="section-toc.1-1.2.2.4.1"><xref derivedContent="2.4" format="counter" sectionFormat="of" target="section-2.4"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-using-the-ca-in-test-suites">Using the CA in Test Suites</xref></t>
              </li>
              <li pn="section-toc.1-1.2.2.5">
                <t indent="0" pn="section-toc.1-1.2.2.5.1"><xref derivedContent="2.5" format="counter" sectionFormat="of" target="section-2.5"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-certificate-chains">Certificate Chains</xref></t>
              </li>
              <li pn="section-toc.1-1.2.2.6">
                <t indent="0" pn="section-toc.1-1.2.2.6.1"><xref derivedContent="2.6" format="counter" sectionFormat="of" target="section-2.6"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-passwords">Passwords</xref></t>
              </li>
              <li pn="section-toc.1-1.2.2.7">
                <t indent="0" pn="section-toc.1-1.2.2.7.1"><xref derivedContent="2.7" format="counter" sectionFormat="of" target="section-2.7"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-secret-key-origins">Secret Key Origins</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.3">
            <t indent="0" pn="section-toc.1-1.3.1"><xref derivedContent="3" format="counter" sectionFormat="of" target="section-3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-example-rsa-certification-a">Example RSA Certification Authority</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.3.2">
              <li pn="section-toc.1-1.3.2.1">
                <t indent="0" pn="section-toc.1-1.3.2.1.1"><xref derivedContent="3.1" format="counter" sectionFormat="of" target="section-3.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-rsa-certification-authority">RSA Certification Authority Root Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.3.2.2">
                <t indent="0" pn="section-toc.1-1.3.2.2.1"><xref derivedContent="3.2" format="counter" sectionFormat="of" target="section-3.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-rsa-certification-authority-">RSA Certification Authority Secret Key</xref></t>
              </li>
              <li pn="section-toc.1-1.3.2.3">
                <t indent="0" pn="section-toc.1-1.3.2.3.1"><xref derivedContent="3.3" format="counter" sectionFormat="of" target="section-3.3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-rsa-certification-authority-c">RSA Certification Authority Cross-Signed Certificate</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.4">
            <t indent="0" pn="section-toc.1-1.4.1"><xref derivedContent="4" format="counter" sectionFormat="of" target="section-4"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-alices-sample-certificates">Alice's Sample Certificates</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.4.2">
              <li pn="section-toc.1-1.4.2.1">
                <t indent="0" pn="section-toc.1-1.4.2.1.1"><xref derivedContent="4.1" format="counter" sectionFormat="of" target="section-4.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-alices-signature-verificati">Alice's Signature Verification End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.4.2.2">
                <t indent="0" pn="section-toc.1-1.4.2.2.1"><xref derivedContent="4.2" format="counter" sectionFormat="of" target="section-4.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-alices-signing-private-key-">Alice's Signing Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.4.2.3">
                <t indent="0" pn="section-toc.1-1.4.2.3.1"><xref derivedContent="4.3" format="counter" sectionFormat="of" target="section-4.3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-alices-encryption-end-entit">Alice's Encryption End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.4.2.4">
                <t indent="0" pn="section-toc.1-1.4.2.4.1"><xref derivedContent="4.4" format="counter" sectionFormat="of" target="section-4.4"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-alices-decryption-private-k">Alice's Decryption Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.4.2.5">
                <t indent="0" pn="section-toc.1-1.4.2.5.1"><xref derivedContent="4.5" format="counter" sectionFormat="of" target="section-4.5"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-pkcs-12-object-for-alice">PKCS #12 Object for Alice</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.5">
            <t indent="0" pn="section-toc.1-1.5.1"><xref derivedContent="5" format="counter" sectionFormat="of" target="section-5"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-bobs-sample">Bob's Sample</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.5.2">
              <li pn="section-toc.1-1.5.2.1">
                <t indent="0" pn="section-toc.1-1.5.2.1.1"><xref derivedContent="5.1" format="counter" sectionFormat="of" target="section-5.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-bobs-signature-verification">Bob's Signature Verification End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.5.2.2">
                <t indent="0" pn="section-toc.1-1.5.2.2.1"><xref derivedContent="5.2" format="counter" sectionFormat="of" target="section-5.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-bobs-signing-private-key-ma">Bob's Signing Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.5.2.3">
                <t indent="0" pn="section-toc.1-1.5.2.3.1"><xref derivedContent="5.3" format="counter" sectionFormat="of" target="section-5.3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-bobs-encryption-end-entity-">Bob's Encryption End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.5.2.4">
                <t indent="0" pn="section-toc.1-1.5.2.4.1"><xref derivedContent="5.4" format="counter" sectionFormat="of" target="section-5.4"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-bobs-decryption-private-key">Bob's Decryption Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.5.2.5">
                <t indent="0" pn="section-toc.1-1.5.2.5.1"><xref derivedContent="5.5" format="counter" sectionFormat="of" target="section-5.5"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-pkcs-12-object-for-bob">PKCS #12 Object for Bob</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.6">
            <t indent="0" pn="section-toc.1-1.6.1"><xref derivedContent="6" format="counter" sectionFormat="of" target="section-6"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-example-ed25519-certificati">Example Ed25519 Certification Authority</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.6.2">
              <li pn="section-toc.1-1.6.2.1">
                <t indent="0" pn="section-toc.1-1.6.2.1.1"><xref derivedContent="6.1" format="counter" sectionFormat="of" target="section-6.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-ed25519-certification-autho">Ed25519 Certification Authority Root Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.6.2.2">
                <t indent="0" pn="section-toc.1-1.6.2.2.1"><xref derivedContent="6.2" format="counter" sectionFormat="of" target="section-6.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-ed25519-certification-author">Ed25519 Certification Authority Secret Key</xref></t>
              </li>
              <li pn="section-toc.1-1.6.2.3">
                <t indent="0" pn="section-toc.1-1.6.2.3.1"><xref derivedContent="6.3" format="counter" sectionFormat="of" target="section-6.3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-ed25519-certification-authori">Ed25519 Certification Authority Cross-Signed Certificate</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.7">
            <t indent="0" pn="section-toc.1-1.7.1"><xref derivedContent="7" format="counter" sectionFormat="of" target="section-7"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-carloss-sample-certificates">Carlos's Sample Certificates</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.7.2">
              <li pn="section-toc.1-1.7.2.1">
                <t indent="0" pn="section-toc.1-1.7.2.1.1"><xref derivedContent="7.1" format="counter" sectionFormat="of" target="section-7.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-carloss-signature-verificat">Carlos's Signature Verification End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.7.2.2">
                <t indent="0" pn="section-toc.1-1.7.2.2.1"><xref derivedContent="7.2" format="counter" sectionFormat="of" target="section-7.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-carloss-signing-private-key">Carlos's Signing Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.7.2.3">
                <t indent="0" pn="section-toc.1-1.7.2.3.1"><xref derivedContent="7.3" format="counter" sectionFormat="of" target="section-7.3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-carloss-encryption-end-enti">Carlos's Encryption End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.7.2.4">
                <t indent="0" pn="section-toc.1-1.7.2.4.1"><xref derivedContent="7.4" format="counter" sectionFormat="of" target="section-7.4"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-carloss-decryption-private-">Carlos's Decryption Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.7.2.5">
                <t indent="0" pn="section-toc.1-1.7.2.5.1"><xref derivedContent="7.5" format="counter" sectionFormat="of" target="section-7.5"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-pkcs-12-object-for-carlos">PKCS #12 Object for Carlos</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.8">
            <t indent="0" pn="section-toc.1-1.8.1"><xref derivedContent="8" format="counter" sectionFormat="of" target="section-8"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-danas-sample-certificates">Dana's Sample Certificates</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.8.2">
              <li pn="section-toc.1-1.8.2.1">
                <t indent="0" pn="section-toc.1-1.8.2.1.1"><xref derivedContent="8.1" format="counter" sectionFormat="of" target="section-8.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-danas-signature-verificatio">Dana's Signature Verification End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.8.2.2">
                <t indent="0" pn="section-toc.1-1.8.2.2.1"><xref derivedContent="8.2" format="counter" sectionFormat="of" target="section-8.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-danas-signing-private-key-m">Dana's Signing Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.8.2.3">
                <t indent="0" pn="section-toc.1-1.8.2.3.1"><xref derivedContent="8.3" format="counter" sectionFormat="of" target="section-8.3"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-danas-encryption-end-entity">Dana's Encryption End-Entity Certificate</xref></t>
              </li>
              <li pn="section-toc.1-1.8.2.4">
                <t indent="0" pn="section-toc.1-1.8.2.4.1"><xref derivedContent="8.4" format="counter" sectionFormat="of" target="section-8.4"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-danas-decryption-private-ke">Dana's Decryption Private Key Material</xref></t>
              </li>
              <li pn="section-toc.1-1.8.2.5">
                <t indent="0" pn="section-toc.1-1.8.2.5.1"><xref derivedContent="8.5" format="counter" sectionFormat="of" target="section-8.5"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-pkcs-12-object-for-dana">PKCS #12 Object for Dana</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.9">
            <t indent="0" pn="section-toc.1-1.9.1"><xref derivedContent="9" format="counter" sectionFormat="of" target="section-9"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-security-considerations">Security Considerations</xref></t>
          </li>
          <li pn="section-toc.1-1.10">
            <t indent="0" pn="section-toc.1-1.10.1"><xref derivedContent="10" format="counter" sectionFormat="of" target="section-10"/>. <xref derivedContent="" format="title" sectionFormat="of" target="name-iana-considerations">IANA Considerations</xref></t>
          </li>
          <li pn="section-toc.1-1.11">
            <t indent="0" pn="section-toc.1-1.11.1"><xref derivedContent="11" format="counter" sectionFormat="of" target="section-11"/>. <xref derivedContent="" format="title" sectionFormat="of" target="name-references">References</xref></t>
            <ul bare="true" empty="true" indent="2" spacing="compact" pn="section-toc.1-1.11.2">
              <li pn="section-toc.1-1.11.2.1">
                <t indent="0" pn="section-toc.1-1.11.2.1.1"><xref derivedContent="11.1" format="counter" sectionFormat="of" target="section-11.1"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-normative-references">Normative References</xref></t>
              </li>
              <li pn="section-toc.1-1.11.2.2">
                <t indent="0" pn="section-toc.1-1.11.2.2.1"><xref derivedContent="11.2" format="counter" sectionFormat="of" target="section-11.2"/>.  <xref derivedContent="" format="title" sectionFormat="of" target="name-informative-references">Informative References</xref></t>
              </li>
            </ul>
          </li>
          <li pn="section-toc.1-1.12">
            <t indent="0" pn="section-toc.1-1.12.1"><xref derivedContent="" format="none" sectionFormat="of" target="section-appendix.a"/><xref derivedContent="" format="title" sectionFormat="of" target="name-acknowledgements">Acknowledgements</xref></t>
          </li>
          <li pn="section-toc.1-1.13">
            <t indent="0" pn="section-toc.1-1.13.1"><xref derivedContent="" format="none" sectionFormat="of" target="section-appendix.b"/><xref derivedContent="" format="title" sectionFormat="of" target="name-authors-address">Author's Address</xref></t>
          </li>
        </ul>
      </section>
    </toc>
  </front>
  <middle>
    <section anchor="introduction" numbered="true" toc="include" removeInRFC="false" pn="section-1">
      <name slugifiedName="name-introduction">Introduction</name>
      <t indent="0" pn="section-1-1">The S/MIME (<xref target="RFC8551" format="default" sectionFormat="of" derivedContent="RFC8551"/>) development
      community, in particular the email development community, benefits from
      sharing samples of signed and/or encrypted data.  Often, the exact key
      material used does not matter because the properties being tested
      pertain to implementation correctness, completeness, or interoperability
      of the overall system.  However, without access to the relevant secret
      key material, a sample is useless.</t>
      <t indent="0" pn="section-1-2">This document defines a small set of X.509v3 certificates (<xref target="RFC5280" format="default" sectionFormat="of" derivedContent="RFC5280"/>) and secret keys for use when
      generating or operating on such samples.</t>
      <t indent="0" pn="section-1-3">An example RSA Certification Authority is supplied, and sample RSA
      certificates are provided for two "personas", Alice and Bob.</t>
      <t indent="0" pn="section-1-4">Additionally, an Ed25519 (<xref target="RFC8032" format="default" sectionFormat="of" derivedContent="RFC8032"/>) Certification Authority is supplied, along with sample Ed25519 certificates for two more "personas", Carlos and Dana.</t>
      <t indent="0" pn="section-1-5">This document focuses narrowly on functional, well-formed identity
      and key material.  It is a starting point that other documents can use
      to develop sample signed or encrypted messages, test vectors, or other
      artifacts for improved interoperability.</t>
      <section anchor="terminology" numbered="true" toc="include" removeInRFC="false" pn="section-1.1">
        <name slugifiedName="name-terminology">Terminology</name>
        <dl indent="3" newline="false" spacing="normal" pn="section-1.1-1">
          <dt pn="section-1.1-1.1">"Certification Authority" (or "CA"):
          </dt>
          <dd pn="section-1.1-1.2">a party capable of issuing X.509                
certificates
	  </dd>
          <dt pn="section-1.1-1.3">"End Entity" (or "EE"):
          </dt>
          <dd pn="section-1.1-1.4">a party that is capable of using X.509 certificates (and their         
corresponding secret key material)
	  </dd>
          <dt pn="section-1.1-1.5">"Mail User Agent" (or "MUA"):
          </dt>
          <dd pn="section-1.1-1.6">a program that generates or handles email messages (<xref target="RFC5322" format="default" sectionFormat="of" derivedContent="RFC5322"/>)
	  </dd>
        </dl>
      </section>
      <section anchor="prior-work" numbered="true" toc="include" removeInRFC="false" pn="section-1.2">
        <name slugifiedName="name-prior-work">Prior Work</name>
        <t indent="0" pn="section-1.2-1"><xref target="RFC4134" format="default" sectionFormat="of" derivedContent="RFC4134"/> contains some sample certificates as well as messages of various S/MIME formats.
That older work has unacceptably old algorithm choices that may introduce failures when testing modern systems: in 2019, some tools explicitly marked 1024-bit RSA and 1024-bit DSS as weak.</t>
        <t indent="0" pn="section-1.2-2">This earlier document also does not use the now widely accepted
        Privacy-Enhanced Mail (PEM) encoding (see <xref target="RFC7468" format="default" sectionFormat="of" derivedContent="RFC7468"/>) for the objects and instead embeds runnable Perl
        code to extract them from the document.</t>
        <t indent="0" pn="section-1.2-3">It also includes examples of messages and other structures that are greater in ambition than this document intends to be.</t>
        <t indent="0" pn="section-1.2-4"><xref target="RFC8410" format="default" sectionFormat="of" derivedContent="RFC8410"/> includes an example
        X25519 certificate that is certified with Ed25519, but it appears to
        be self issued, and it is not directly useful in testing an S/MIME-capable
        MUA.</t>
      </section>
    </section>
    <section anchor="background" numbered="true" toc="include" removeInRFC="false" pn="section-2">
      <name slugifiedName="name-background">Background</name>
      <section anchor="certificate-usage" numbered="true" toc="include" removeInRFC="false" pn="section-2.1">
        <name slugifiedName="name-certificate-usage">Certificate Usage</name>
        <t indent="0" pn="section-2.1-1">These X.509 certificates (<xref target="RFC5280" format="default" sectionFormat="of" derivedContent="RFC5280"/>) are designed for use with S/MIME protections (<xref target="RFC8551" format="default" sectionFormat="of" derivedContent="RFC8551"/>) for email (<xref target="RFC5322" format="default" sectionFormat="of" derivedContent="RFC5322"/>).</t>
        <t indent="0" pn="section-2.1-2">In particular, they should be usable with signed and encrypted messages as part of test suites and interoperability frameworks.</t>
        <t indent="0" pn="section-2.1-3">All end-entity and intermediate CA certificates are marked with Certificate Policies from <xref target="TEST-POLICY" format="default" sectionFormat="of" derivedContent="TEST-POLICY"/> indicating that they are intended only for use in testing environments.
End-entity certificates are marked with policy 2.16.840.1.101.3.2.1.48.1 and intermediate CAs are marked with policy  2.16.840.1.101.3.2.1.48.2.</t>
      </section>
      <section anchor="certificate-expiration" numbered="true" toc="include" removeInRFC="false" pn="section-2.2">
        <name slugifiedName="name-certificate-expiration">Certificate Expiration</name>
        <t indent="0" pn="section-2.2-1">The certificates included in this document expire in 2052.
This should be sufficiently far in the future that they will be useful for a few decades.
However, when testing tools in the far future (or when playing with clock-skew scenarios), care should be taken to consider the certificate validity window.</t>
        <t indent="0" pn="section-2.2-2">Due to this lengthy expiration window, these certificates will not be particularly useful to test or evaluate the interaction between certificate expiration and protected messages.</t>
      </section>
      <section anchor="certificate-revocation" numbered="true" toc="include" removeInRFC="false" pn="section-2.3">
        <name slugifiedName="name-certificate-revocation">Certificate Revocation</name>
        <t indent="0" pn="section-2.3-1">Because these are expected to be used in test suites or examples, and we do not expect there to be online network services in these use cases, we do not expect these certificates to produce any revocation artifacts.</t>
        <t indent="0" pn="section-2.3-2">As a result, none of the certificates include either an Online Certificate Status Protocol (OCSP)
        indicator (see <tt>id-ad-ocsp</tt> as defined in the Authority
        Information Access X.509 extension in <xref target="RFC5280" sectionFormat="of" section="4.2.2.1" format="default" derivedLink="https://rfc-editor.org/rfc/rfc5280#section-4.2.2.1" derivedContent="RFC5280"/>) or a Certificate Revocation List (CRL)
        indicator (see the CRL Distribution Points X.509 extension as defined
        in <xref target="RFC5280" sectionFormat="of" section="4.2.1.13" format="default" derivedLink="https://rfc-editor.org/rfc/rfc5280#section-4.2.1.13" derivedContent="RFC5280"/>).</t>
      </section>
      <section anchor="using-the-ca-in-test-suites" numbered="true" toc="include" removeInRFC="false" pn="section-2.4">
        <name slugifiedName="name-using-the-ca-in-test-suites">Using the CA in Test Suites</name>
        <t indent="0" pn="section-2.4-1">To use these end-entity certificates in a piece of software (for example, in a test suite or an interoperability matrix), most tools will need to accept either the example RSA CA (<xref target="sample-rsa-ca" format="default" sectionFormat="of" derivedContent="Section 3"/>) or the example Ed25519 CA (<xref target="sample-ed25519-ca" format="default" sectionFormat="of" derivedContent="Section 6"/>) as a legitimate root authority.</t>
        <t indent="0" pn="section-2.4-2">Note that some tooling behaves differently for certificates validated by "locally installed root CAs" than for pre-installed "system-level" root CAs).
For example, many common implementations of HTTP Public Key Pinning (HPKP) (<xref target="RFC7469" format="default" sectionFormat="of" derivedContent="RFC7469"/>) only applied the designed protections when dealing with a certificate issued by a pre-installed "system-level" root CA and were disabled when dealing with a certificate issued by a "locally installed root CA".</t>
        <t indent="0" pn="section-2.4-3">To test some tooling specifically, it may be necessary to install the root CA as a "system-level" root CA.</t>
      </section>
      <section anchor="certificate-chains" numbered="true" toc="include" removeInRFC="false" pn="section-2.5">
        <name slugifiedName="name-certificate-chains">Certificate Chains</name>
        <t indent="0" pn="section-2.5-1">In most real-world examples, X.509 certificates are deployed with a chain of more than one X.509 certificate.
In particular, there is typically a long-lived root CA that users' software knows about upon installation, and the end-entity certificate is issued by an intermediate CA, which is in turn issued by the root CA.</t>
        <t indent="0" pn="section-2.5-2">The example end-entity certificates in this document can be used either with a simple two-link certificate chain (they are directly certified by their corresponding root CA) or in a three-link chain.</t>
        <t indent="0" pn="section-2.5-3">For example, Alice's encryption certificate (<tt>alice.encrypt.crt</tt>; see <xref target="alice-encrypt-cert" format="default" sectionFormat="of" derivedContent="Section 4.3"/>) can be validated by a peer that directly trusts the example RSA CA's root cert (<tt>ca.rsa.crt</tt>; see <xref target="rsa-ca-cert" format="default" sectionFormat="of" derivedContent="Section 3.1"/>):</t>
        <figure align="left" suppress-title="false" pn="figure-1">
          <name slugifiedName="name-validating-alices-encryptio">Validating Alice's encryption certificate directly when the issuing CA is a trust        anchor</name>
          <artset pn="section-2.5-4.1">
            <artwork type="svg" name="alice-validate-one-hop" align="left" pn="section-2.5-4.1.1"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 528 80" class="diagram" text-anchor="middle" font-family="monospace" font-size="13px">
                <path d="M 8,30 L 8,66" fill="none" stroke="black"/>
                <path d="M 128,30 L 128,66" fill="none" stroke="black"/>
                <path d="M 12,34 L 12,62" fill="none" stroke="black"/>
                <path d="M 124,34 L 124,62" fill="none" stroke="black"/>
                <path d="M 160,32 L 160,64" fill="none" stroke="black"/>
                <path d="M 320,32 L 320,64" fill="none" stroke="black"/>
                <path d="M 8,30 L 128,30" fill="none" stroke="black"/>
                <path d="M 12,34 L 124,34" fill="none" stroke="black"/>
                <path d="M 160,32 L 320,32" fill="none" stroke="black"/>
                <path d="M 128,48 L 152,48" fill="none" stroke="black"/>
                <path d="M 12,62 L 124,62" fill="none" stroke="black"/>
                <path d="M 8,66 L 128,66" fill="none" stroke="black"/>
                <path d="M 160,64 L 320,64" fill="none" stroke="black"/>
                <polygon class="arrowhead" points="160,48 148,42.4 148,53.6" fill="black" transform="rotate(0,152,48)"/>
                <g class="text">
                  <text x="68" y="52">ca.rsa.crt</text>
                  <text x="240" y="52">alice.encrypt.crt</text>
                </g>
              </svg>
            </artwork>
            <artwork type="ascii-art" name="alice-validate-one-hop" align="left" pn="section-2.5-4.1.2">
+==============+   +-------------------+
|| ca.rsa.crt ||--&gt;| alice.encrypt.crt |
+==============+   +-------------------+
</artwork>
          </artset>
        </figure>
        <t indent="0" pn="section-2.5-5">And it can also be validated by a peer that only directly trusts the example Ed25519 CA's   
root cert (<tt>ca.25519.crt</tt>; see <xref target="ed25519-ca-cert" format="default" sectionFormat="of" derivedContent="Section 6.1"/>) via an        
intermediate cross-signed CA cert (<tt>ca.rsa.cross.crt</tt>; see <xref target="rsa-ca-cross-cert" format="default" sectionFormat="of" derivedContent="Section 3.3"/>):</t>
        <figure align="left" suppress-title="false" pn="figure-2">
          <name slugifiedName="name-validating-alices-cert-from">Validating Alice's cert from a different trust anchor via an intermediate cross-signed  CA certificate</name>
          <artset pn="section-2.5-6.1">
            <artwork type="svg" name="alice-validate-two-hops" align="left" pn="section-2.5-6.1.1"><svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 528 80" class="diagram" text-anchor="middle" font-family="monospace" font-size="13px">
                <path d="M 8,30 L 8,66" fill="none" stroke="black"/>
                <path d="M 144,30 L 144,66" fill="none" stroke="black"/>
                <path d="M 12,34 L 12,62" fill="none" stroke="black"/>
                <path d="M 140,34 L 140,62" fill="none" stroke="black"/>
                <path d="M 176,32 L 176,64" fill="none" stroke="black"/>
                <path d="M 328,32 L 328,64" fill="none" stroke="black"/>
                <path d="M 360,32 L 360,64" fill="none" stroke="black"/>
                <path d="M 520,32 L 520,64" fill="none" stroke="black"/>
                <path d="M 8,30 L 144,30" fill="none" stroke="black"/>
                <path d="M 12,34 L 140,34" fill="none" stroke="black"/>
                <path d="M 176,32 L 328,32" fill="none" stroke="black"/>
                <path d="M 360,32 L 520,32" fill="none" stroke="black"/>
                <path d="M 144,48 L 168,48" fill="none" stroke="black"/>
                <path d="M 328,48 L 352,48" fill="none" stroke="black"/>
                <path d="M 12,62 L 140,62" fill="none" stroke="black"/>
                <path d="M 8,66 L 144,66" fill="none" stroke="black"/>
                <path d="M 176,64 L 328,64" fill="none" stroke="black"/>
                <path d="M 360,64 L 520,64" fill="none" stroke="black"/>
                <polygon class="arrowhead" points="360,48 348,42.4 348,53.6" fill="black" transform="rotate(0,352,48)"/>
                <polygon class="arrowhead" points="176,48 164,42.4 164,53.6" fill="black" transform="rotate(0,168,48)"/>
                <g class="text">
                  <text x="76" y="52">ca.25519.crt</text>
                  <text x="252" y="52">ca.rsa.cross.crt</text>
                  <text x="440" y="52">alice.encrypt.crt</text>
                </g>
              </svg>
            </artwork>
            <artwork type="ascii-art" name="alice-validate-two-hops" align="left" pn="section-2.5-6.1.2">
+================+   +------------------+   +-------------------+
|| ca.25519.crt ||--&gt;| ca.rsa.cross.crt |--&gt;| alice.encrypt.crt |
+================+   +------------------+   +-------------------+
</artwork>
          </artset>
        </figure>
        <t indent="0" pn="section-2.5-7">By omitting the cross-signed CA certs, it should be possible to test a "transvalid" certificate (an end-entity certificate that is supplied without its intermediate certificate) in some configurations.</t>
      </section>
      <section anchor="passwords" numbered="true" toc="include" removeInRFC="false" pn="section-2.6">
        <name slugifiedName="name-passwords">Passwords</name>
        <t indent="0" pn="section-2.6-1">Each secret key presented in this document is represented as a PEM-encoded PKCS #8 (<xref target="RFC5958" format="default" sectionFormat="of" derivedContent="RFC5958"/>) object in cleartext form (it has no password).</t>
        <t indent="0" pn="section-2.6-2">As such, the secret key objects are not suitable for verifying interoperable password protection schemes.</t>
        <t indent="0" pn="section-2.6-3">However, the PKCS #12 (<xref target="RFC7292" format="default" sectionFormat="of" derivedContent="RFC7292"/>) objects do have simple textual passwords, because tooling for dealing with passwordless PKCS #12 objects is underdeveloped at the time of this document.</t>
      </section>
      <section anchor="secret-key-origins" numbered="true" toc="include" removeInRFC="false" pn="section-2.7">
        <name slugifiedName="name-secret-key-origins">Secret Key Origins</name>
        <t indent="0" pn="section-2.7-1">The secret RSA keys in this document are all deterministically derived using provable prime generation as found in <xref target="FIPS186-4" format="default" sectionFormat="of" derivedContent="FIPS186-4"/> based on known seeds derived via SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) from simple strings.
The validation parameters for these derivations are stored in the objects themselves as specified in <xref target="RFC8479" format="default" sectionFormat="of" derivedContent="RFC8479"/>.</t>
        <t indent="0" pn="section-2.7-2">The secret Ed25519 and X25519 keys in this document are all derived by hashing a simple string.
The seeds and their derivation are included in the document for informational purposes and to allow recreation of the objects from appropriate tooling.</t>
        <t indent="0" pn="section-2.7-3">All RSA seeds used are 224 bits long (the first 224 bits of the SHA-256 digest of the origin string) and are represented in hexadecimal.</t>
      </section>
    </section>
    <section anchor="sample-rsa-ca" numbered="true" toc="include" removeInRFC="false" pn="section-3">
      <name slugifiedName="name-example-rsa-certification-a">Example RSA Certification Authority</name>
      <t indent="0" pn="section-3-1">The example RSA Certification Authority has the following information:</t>
      <dl indent="3" newline="false" spacing="normal" pn="section-3-2">
        <dt pn="section-3-2.1">Name:
        </dt>
        <dd pn="section-3-2.2">
          <tt>Sample LAMPS RSA Certification Authority</tt>
        </dd>
      </dl>
      <section anchor="rsa-ca-cert" numbered="true" toc="include" removeInRFC="false" pn="section-3.1">
        <name slugifiedName="name-rsa-certification-authority">RSA Certification Authority Root Certificate</name>
        <t indent="0" pn="section-3.1-1">This certificate is used to verify certificates issued by the example RSA Certification Authority.</t>
        <sourcecode type="x509" name="ca.rsa.crt" markers="false" pn="section-3.1-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="rsa-certification-authority-secret-key" numbered="true" toc="include" removeInRFC="false" pn="section-3.2">
        <name slugifiedName="name-rsa-certification-authority-">RSA Certification Authority Secret Key</name>
        <t indent="0" pn="section-3.2-1">This secret key material is used by the example RSA Certification Authority to issue new certificates.</t>
        <sourcecode type="pkcs8" name="ca.rsa.key" markers="false" pn="section-3.2-2">
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-3.2-3">This secret key was generated using provable prime generation found
        in <xref target="FIPS186-4" format="default" sectionFormat="of" derivedContent="FIPS186-4"/> using the seed
        <tt>a5c1b7847614ed661a6b0522351428b4b7f09d8ccca2d99302dd62e9</tt>.
        This seed is the first 224 bits of the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the string
        <tt>draft-lamps-sample-certs-keygen.ca.rsa.seed</tt>.</t>
      </section>
      <section anchor="rsa-ca-cross-cert" numbered="true" toc="include" removeInRFC="false" pn="section-3.3">
        <name slugifiedName="name-rsa-certification-authority-c">RSA Certification Authority Cross-Signed Certificate</name>
        <t indent="0" pn="section-3.3-1">If an email client only trusts the Ed25519 Certification Authority Root Certificate found in <xref target="ed25519-ca-cert" format="default" sectionFormat="of" derivedContent="Section 6.1"/>, they can use this intermediate CA certificate to verify any end-entity certificate issued by the example RSA Certification Authority.</t>
        <sourcecode type="x509" name="ca.rsa.cross.crt" markers="false" pn="section-3.3-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
    </section>
    <section anchor="alices-sample-certificates" numbered="true" toc="include" removeInRFC="false" pn="section-4">
      <name slugifiedName="name-alices-sample-certificates">Alice's Sample Certificates</name>
      <t indent="0" pn="section-4-1">Alice has the following information:</t>
      <dl indent="3" newline="false" spacing="normal" pn="section-4-2">
        <dt pn="section-4-2.1">Name:
        </dt>
        <dd pn="section-4-2.2">
          <tt>Alice Lovelace</tt>
        </dd>
        <dt pn="section-4-2.3">Email Address:
        </dt>
        <dd pn="section-4-2.4">
          <tt>alice@smime.example</tt>
        </dd>
      </dl>
      <section anchor="alice-verify-cert" numbered="true" toc="include" removeInRFC="false" pn="section-4.1">
        <name slugifiedName="name-alices-signature-verificati">Alice's Signature Verification End-Entity Certificate</name>
        <t indent="0" pn="section-4.1-1">This certificate is used for verification of signatures made by Alice.</t>
        <sourcecode type="x509" name="alice.sign.crt" markers="false" pn="section-4.1-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="alice-sign-key" numbered="true" toc="include" removeInRFC="false" pn="section-4.2">
        <name slugifiedName="name-alices-signing-private-key-">Alice's Signing Private Key Material</name>
        <t indent="0" pn="section-4.2-1">This private key material is used by Alice to create signatures.</t>
        <sourcecode type="pkcs8" name="alice.sign.key" markers="false" pn="section-4.2-2">
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-4.2-3">This secret key was generated using provable prime generation found
        in <xref target="FIPS186-4" format="default" sectionFormat="of" derivedContent="FIPS186-4"/> using the seed
        <tt>92c89d4330d3d8e31d4fde9b9d0fe6e9fc142141dd65a45e5b436f05</tt>.
        This seed is the first 224 bits of the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the string
        <tt>draft-lamps-sample-certs-keygen.alice.sign.seed</tt>.</t>
      </section>
      <section anchor="alice-encrypt-cert" numbered="true" toc="include" removeInRFC="false" pn="section-4.3">
        <name slugifiedName="name-alices-encryption-end-entit">Alice's Encryption End-Entity Certificate</name>
        <t indent="0" pn="section-4.3-1">This certificate is used to encrypt messages to Alice.</t>
        <sourcecode type="x509" name="alice.encrypt.crt" markers="false" pn="section-4.3-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="alice-decrypt-key" numbered="true" toc="include" removeInRFC="false" pn="section-4.4">
        <name slugifiedName="name-alices-decryption-private-k">Alice's Decryption Private Key Material</name>
        <t indent="0" pn="section-4.4-1">This private key material is used by Alice to decrypt messages.</t>
        <sourcecode type="pkcs8" name="alice.encrypt.key" markers="false" pn="section-4.4-2">
-----BEGIN PRIVATE KEY-----
MIIE+gIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCalSn6i8Gi44/o
AVAn5GnCk4PHHNjrSfWUnnelN41KImVaTC3D9zFCrS3i4Pa9ZgHyA5Qf8JW3ZmnV
z5q7M8onZm7mZjqQeb6FUH4i2GMt4jse2Dqs165ernT9O5NLFflHUjURca3ynqEB
BV4DmhnZp8eDhv3t6dXyCjNHT82S6DgCReZuTtMc1zy++MxQlqdn9WZLhOAOpeNZ
KGmVwjeVy+8FkyzC3jX/Qcm+ZLCqlLqhBwDHdZ5qDTII2PVX1X3K7/cONxhvBbaU
l/k1swdszUtjhflyFZ80RuQ3qFC6vL/PGeWy6SCf58duq/AOEksCAWlb+MD8QH9Y
j7CFSmq1AgMBAAECggEADgxoWEDDRE5yEZ+s7TMw+WH2o+3XOOrryqnsLbOyv34I
wAAUWK7qZyjd9rSDOAtBOgFhQNXYhWZlT+0iHslCIfqJMZ8wy1iFHBCIphoMSWs5
/D+idXrUef5Y23rClBxXH0g1UnSGXnpUH4ehV6p1lvZMh4OJKEoMC4cpyd1SzXrw
+VGCc1+pXv/tTW3Rb2qoWO9JoWY+Epcssrw5N8OFIFODh4QfbLN6pVTt28aQ4pf/
1KhLoapjFzXSYp/jrcNjYJ9qRdSAbZsKOJ2yZ0yqjLHDCDipFty+W0pkUZcJhsgu
Cg1Stt7tKgSvAV/nEjN8e/vA91/AACKBCNcLzEoLgQKBgQC4eTM6BDCzlusXJBK4
SRC/WwUthJZzfOk2Gmwr0DCTRYhWQSDjBfiQNboazHObVPz45qP10fOt2iPEHeX+
VWAXTNrN69M9lEzxygA3s76lAejBR3FbLWkzLYqPB3oZwSIE7CrWHTXJipFWZv+X
FG1R418fnRCUMJ4j85qem5iyqQKBgQDWhQMJu7FC02fr83qsIdLwqhiDtTpwUN3j
qfp7JoEZOxbm3TgM1xPAkrQTUgfr2ZhXGtUwsuKHyifxQEycrTkBOg0gqAfG0fnv
ybyXK6/guctHJQiy64lL39kPuvQkKB+YO60B/oF6zbyFvqanoKXjpspObN3i3yBU
X5/EOu/LLQKBgQCUVwHWeWAgSg+pgBx9jGOnPK4hOCkznRJ7qyuo37Tv+E317lFf
vYFvlYSd4CJmmiUCkZTvK3FkL7HrFo/HwSeQFQEt7aDkN8jX9bPPFv8K+UoNgkGp
LA8YVFrDQSPyadfNVYvsuXhzJLZSYGjPOGHgI5JufYLDZ4UDK/T97ekQYQKBgDDM
ORCxvXTyGiW2USVu3EkaqFDtnMmH27G6LNxuudc/dco2cFWbZ0bbGFN8yYiBCwJl
fDGDv7wb5FIgykypqtn4lpvjHUHA6hX90gShT3TTTsZ0SjJJGgZEeV/2qyq+ZdF/
Ya+ecV26BzR1Vfuzs4jBnCuS4DaHgxcuWW2N6pZRAoGAWTovk3xdtE0TZvDerxUY
l8hX+vwJGy7uZjegi4cFecSkOR4iekVxrEvEGhpNdEB2GqdLgp6Q6GPdalCG2wc4
7pojp/0inc4RtRRf3nZHaTy00bnSe/0y+t0OUbkRMtXhnViVhCcOt6BUcsHupbu2
Adub72KLk+gvASDduuatGjqgOzA5BgorBgEEAZIIEggBMSswKQYJYIZIAWUDBAIC
BBwc90hJ90RfRmxCciUfX5a3f6Bpiz6Ys/Hugge/
-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-4.4-3">This secret key was generated using provable prime generation found in <xref target="FIPS186-4" format="default" sectionFormat="of" derivedContent="FIPS186-4"/> using the seed <tt>1cf74849f7445f466c4272251f5f96b77fa0698b3e98b3f1ee8207bf</tt>.
This seed is the first 224 bits of the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the string <tt>draft-lamps-sample-certs-keygen.alice.encrypt.seed</tt>.</t>
      </section>
      <section anchor="pkcs12-object-for-alice" numbered="true" toc="include" removeInRFC="false" pn="section-4.5">
        <name slugifiedName="name-pkcs-12-object-for-alice">PKCS #12 Object for Alice</name>
        <t indent="0" pn="section-4.5-1">This PKCS #12 (<xref target="RFC7292" format="default" sectionFormat="of" derivedContent="RFC7292"/>) object
        contains the same information as presented in Sections <xref target="rsa-ca-cross-cert" format="counter" sectionFormat="of" derivedContent="3.3"/>, <xref target="alice-verify-cert" format="counter" sectionFormat="of" derivedContent="4.1"/>, <xref target="alice-sign-key" format="counter" sectionFormat="of" derivedContent="4.2"/>, <xref target="alice-encrypt-cert" format="counter" sectionFormat="of" derivedContent="4.3"/>, and <xref target="alice-decrypt-key" format="counter" sectionFormat="of" derivedContent="4.4"/>.

</t>
        <t indent="0" pn="section-4.5-2">It is locked with the simple five-letter password <tt>alice</tt>.</t>
        <sourcecode type="pkcs12" name="alice.p12" markers="false" pn="section-4.5-3">
-----BEGIN PKCS12-----
[encoded data, 8188 characters]
-----END PKCS12-----
</sourcecode>
      </section>
    </section>
    <section anchor="bobs-sample" numbered="true" toc="include" removeInRFC="false" pn="section-5">
      <name slugifiedName="name-bobs-sample">Bob's Sample</name>
      <t indent="0" pn="section-5-1">Bob has the following information:</t>
      <dl indent="3" newline="false" spacing="normal" pn="section-5-2">
        <dt pn="section-5-2.1">Name:
        </dt>
        <dd pn="section-5-2.2">
          <tt>Bob Babbage</tt>
        </dd>
        <dt pn="section-5-2.3">Email Address:
        </dt>
        <dd pn="section-5-2.4">
          <tt>bob@smime.example</tt>
        </dd>
      </dl>
      <section anchor="bob-verify-cert" numbered="true" toc="include" removeInRFC="false" pn="section-5.1">
        <name slugifiedName="name-bobs-signature-verification">Bob's Signature Verification End-Entity Certificate</name>
        <t indent="0" pn="section-5.1-1">This certificate is used for verification of signatures made by Bob.</t>
        <sourcecode type="x509" name="bob.sign.crt" markers="false" pn="section-5.1-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="bob-sign-key" numbered="true" toc="include" removeInRFC="false" pn="section-5.2">
        <name slugifiedName="name-bobs-signing-private-key-ma">Bob's Signing Private Key Material</name>
        <t indent="0" pn="section-5.2-1">This private key material is used by Bob to create signatures.</t>
        <sourcecode type="pkcs8" name="bob.sign.key" markers="false" pn="section-5.2-2">
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-5.2-3">This secret key was generated using provable prime generation found
        in <xref target="FIPS186-4" format="default" sectionFormat="of" derivedContent="FIPS186-4"/> using the seed
        <tt>f4afaacbb5473f360e06ac32e00188fe4173ae15c99bcf043a8b8f6e</tt>.
        This seed is the first 224 bits of the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the string
        <tt>draft-lamps-sample-certs-keygen.bob.sign.seed</tt>.</t>
      </section>
      <section anchor="bob-encrypt-cert" numbered="true" toc="include" removeInRFC="false" pn="section-5.3">
        <name slugifiedName="name-bobs-encryption-end-entity-">Bob's Encryption End-Entity Certificate</name>
        <t indent="0" pn="section-5.3-1">This certificate is used to encrypt messages to Bob.</t>
        <sourcecode type="x509" name="bob.encrypt.crt" markers="false" pn="section-5.3-2">
-----BEGIN CERTIFICATE-----
MIIDyjCCArKgAwIBAgITMHxHQA+GJjocYtLrgy+WwNeGlDANBgkqhkiG9w0BAQ0F
ADBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzExMC8GA1UEAxMo
U2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAgFw0xOTEx
MjAwNjU0MThaGA8yMDUyMDkyNzA2NTQxOFowODENMAsGA1UEChMESUVURjERMA8G
A1UECxMITEFNUFMgV0cxFDASBgNVBAMTC0JvYiBCYWJiYWdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtHAlBNMiBIk8iJqwHk/yDoFWwj8P9Z1uYdq
1aqIuofvjoAyjdA8TbsBRGdmvaIOSQOepsNjW1ko7lE8HlDs9JHn1E+tzH3mKfn+
G2erY+alkMJTXPvMAUdCA8+e1OJ7k91gYXDpzIWrP3Kc0xTlsJ8tGJ6mhydJX3wP
0/HuyHpfKQQfDusPH8S5yidPciWuB7Wj0X4xY1pUAz2rSSAlnGvhEzKFbW43BPjY
XPUnRWMtXFya1djq6Eb9M/klbhdZheDLLsjLUSXYU70r9VXGM/qcjd/NhWYphCeB
cqswaM5mXLYdm0mFmqoecF62mUE0DiNdhwKTtnefd0cll+D3FQIDAQABo4GtMIGq
MAwGA1UdEwEB/wQCMAAwFwYDVR0gBBAwDjAMBgpghkgBZQMCATABMBwGA1UdEQQV
MBOBEWJvYkBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoGCCsGAQUFBwMEMA4GA1Ud
DwEB/wQEAwIFIDAdBgNVHQ4EFgQUSrOsMVMCSZxN42554CVhlT6IYiUwHwYDVR0j
BBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZIhvcNAQENBQADggEBAC2c
Y8FgaxgB+Dx9gAFj35ae1vgzYiWI3Ax3FSxogo/GzpK//LB4215oeBuKXbm0ixBn
4nojxD7PMlM0i+ilAvVNJNaHY9TtgIgq8V/C0C7vL8SdBN01e5ZRI764ohu9ivYv
Ixvvt7gzvSTpe+NUT1i09xNgsC8v19WB/BwkqMAgDqMxqCxT4fyrvVwpxNBke75j
E6Q3xCjfdOWYcfMLK7EsTSgimYuonZjN7v/yqTdjn/iVH+agL/2MlSfiU36w/Yf1
7EM09uKGH/Javh+2Vjd0j8rE/q2Iaac5VI91M6xz5oDZUknycBKKinR+nJWMt5AK
UAaL2Mjl3YtrUGBpxxY=
-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="bob-decrypt-key" numbered="true" toc="include" removeInRFC="false" pn="section-5.4">
        <name slugifiedName="name-bobs-decryption-private-key">Bob's Decryption Private Key Material</name>
        <t indent="0" pn="section-5.4-1">This private key material is used by Bob to decrypt messages.</t>
        <sourcecode type="pkcs8" name="bob.encrypt.key" markers="false" pn="section-5.4-2">
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-5.4-3">This secret key was generated using provable prime generation found
        in <xref target="FIPS186-4" format="default" sectionFormat="of" derivedContent="FIPS186-4"/> using the seed
        <tt>98c8998652958929e889e3419f3bfd0edfe0aca15da3060dedf8a1e8</tt>.
        This seed is the first 224 bits of the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the string
        <tt>draft-lamps-sample-certs-keygen.bob.encrypt.seed</tt>.</t>
      </section>
      <section anchor="pkcs12-object-for-bob" numbered="true" toc="include" removeInRFC="false" pn="section-5.5">
        <name slugifiedName="name-pkcs-12-object-for-bob">PKCS #12 Object for Bob</name>
        <t indent="0" pn="section-5.5-1">This PKCS #12 (<xref target="RFC7292" format="default" sectionFormat="of" derivedContent="RFC7292"/>) object contains the same information as presented in Sections <xref target="rsa-ca-cross-cert" format="counter" sectionFormat="of" derivedContent="3.3"/>, <xref target="bob-verify-cert" format="counter" sectionFormat="of" derivedContent="5.1"/>, <xref target="bob-sign-key" format="counter" sectionFormat="of" derivedContent="5.2"/>, <xref target="bob-encrypt-cert" format="counter" sectionFormat="of" derivedContent="5.3"/>, and <xref target="bob-decrypt-key" format="counter" sectionFormat="of" derivedContent="5.4"/>.
        </t>
        <t indent="0" pn="section-5.5-2">It is locked with the simple three-letter password <tt>bob</tt>.</t>
        <sourcecode type="pkcs12" name="bob.p12" markers="false" pn="section-5.5-3">
-----BEGIN PKCS12-----
[encoded data, 8128 characters]
n9Q1rAOUCgw+KWxk+8EECJ1vqXe6ro0FAgIoAA==
-----END PKCS12-----
</sourcecode>
      </section>
    </section>
    <section anchor="sample-ed25519-ca" numbered="true" toc="include" removeInRFC="false" pn="section-6">
      <name slugifiedName="name-example-ed25519-certificati">Example Ed25519 Certification Authority</name>
      <t indent="0" pn="section-6-1">The example Ed25519 Certification Authority has the following information:</t>
      <dl indent="3" newline="false" spacing="normal" pn="section-6-2">
        <dt pn="section-6-2.1">Name:
        </dt>
        <dd pn="section-6-2.2">
          <tt>Sample LAMPS Ed25519 Certification Authority</tt>
        </dd>
      </dl>
      <section anchor="ed25519-ca-cert" numbered="true" toc="include" removeInRFC="false" pn="section-6.1">
        <name slugifiedName="name-ed25519-certification-autho">Ed25519 Certification Authority Root Certificate</name>
        <t indent="0" pn="section-6.1-1">This certificate is used to verify certificates issued by the example Ed25519 Certification Authority.</t>
        <sourcecode type="x509" name="ca.25519.crt" markers="false" pn="section-6.1-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="ed25519-certification-authority-secret-key" numbered="true" toc="include" removeInRFC="false" pn="section-6.2">
        <name slugifiedName="name-ed25519-certification-author">Ed25519 Certification Authority Secret Key</name>
        <t indent="0" pn="section-6.2-1">This secret key material is used by the example Ed25519 Certification Authority to issue new certificates.</t>
        <sourcecode type="pkcs8" name="ca.25519.key" markers="false" pn="section-6.2-2">
-----BEGIN PRIVATE KEY-----
MC4CAQAwBQYDK2VwBCIEIAt889xRDvxNT8ak53T7tzKuSn6CQDe8fIdjrCiSFRcp
-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-6.2-3">This secret key is the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the ASCII string
        <tt>draft-lamps-sample-certs-keygen.ca.25519.seed</tt>.</t>
      </section>
      <section anchor="ed25519-ca-cross-cert" numbered="true" toc="include" removeInRFC="false" pn="section-6.3">
        <name slugifiedName="name-ed25519-certification-authori">Ed25519 Certification Authority Cross-Signed Certificate</name>
        <t indent="0" pn="section-6.3-1">If an email client only trusts the RSA Certification Authority Root Certificate found in <xref target="rsa-ca-cert" format="default" sectionFormat="of" derivedContent="Section 3.1"/>, they can use this intermediate CA certificate to verify any end-entity certificate issued by the example Ed25519 Certification Authority.</t>
        <sourcecode type="x509" name="ca.25519.cross.crt" markers="false" pn="section-6.3-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
    </section>
    <section anchor="carloss-sample-certificates" numbered="true" toc="include" removeInRFC="false" pn="section-7">
      <name slugifiedName="name-carloss-sample-certificates">Carlos's Sample Certificates</name>
      <t indent="0" pn="section-7-1">Carlos has the following information:</t>
      <dl indent="3" newline="false" spacing="normal" pn="section-7-2">
        <dt pn="section-7-2.1">Name:
        </dt>
        <dd pn="section-7-2.2">
          <tt>Carlos Turing</tt>
        </dd>
        <dt pn="section-7-2.3">Email Address:
        </dt>
        <dd pn="section-7-2.4">
          <tt>carlos@smime.example</tt>
        </dd>
      </dl>
      <section anchor="carlos-verify-cert" numbered="true" toc="include" removeInRFC="false" pn="section-7.1">
        <name slugifiedName="name-carloss-signature-verificat">Carlos's Signature Verification End-Entity Certificate</name>
        <t indent="0" pn="section-7.1-1">This certificate is used for verification of signatures made by Carlos.</t>
        <sourcecode type="x509" name="carlos.sign.crt" markers="false" pn="section-7.1-2">
-----BEGIN CERTIFICATE-----
MIICBzCCAbmgAwIBAgITP14fVCTRtAFDeA9zwYoXhR52ljAFBgMrZXAwWTENMAsG
A1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxNTAzBgNVBAMTLFNhbXBsZSBM
QU1QUyBFZDI1NTE5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTIwMTIxNTIx
MzU0NFoYDzIwNTIxMjE1MjEzNTQ0WjA6MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQL
EwhMQU1QUyBXRzEWMBQGA1UEAxMNQ2FybG9zIFR1cmluZzAqMAUGAytlcAMhAMLO
gDIs3mHITYRNYO+RnOedrq5/HuQHXSPyAKaS98ito4GwMIGtMAwGA1UdEwEB/wQC
MAAwFwYDVR0gBBAwDjAMBgpghkgBZQMCATABMB8GA1UdEQQYMBaBFGNhcmxvc0Bz
bWltZS5leGFtcGxlMBMGA1UdJQQMMAoGCCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIG
wDAdBgNVHQ4EFgQUZIXjO5wdWs3mC7oafwi+xJzMhD8wHwYDVR0jBBgwFoAUa6KV
fboUm+QtBNEHpNGC5C5rjLUwBQYDK2VwA0EAwVGQWbdy6FQIpTFsaWvG2/US2fnS
6B+BzgCrkGQKWX1WgkTj4MEOqL+0cFXLr7ZQ2DQUo2iXyTAu58BR6btcCQ==
-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="carlos-sign-key" numbered="true" toc="include" removeInRFC="false" pn="section-7.2">
        <name slugifiedName="name-carloss-signing-private-key">Carlos's Signing Private Key Material</name>
        <t indent="0" pn="section-7.2-1">This private key material is used by Carlos to create signatures.</t>
        <sourcecode type="pkcs8" name="carlos.sign.key" markers="false" pn="section-7.2-2">
-----BEGIN PRIVATE KEY-----
MC4CAQAwBQYDK2VwBCIEILvvxL741LfX+Ep3Iyye3Cjr4JmONIVYhZPM4M9N1IHY
-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-7.2-3">This secret key is the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the ASCII string <tt>draft-lamps-sample-certs-keygen.carlos.sign.25519.seed</tt>.</t>
      </section>
      <section anchor="carlos-encrypt-cert" numbered="true" toc="include" removeInRFC="false" pn="section-7.3">
        <name slugifiedName="name-carloss-encryption-end-enti">Carlos's Encryption End-Entity Certificate</name>
        <t indent="0" pn="section-7.3-1">This certificate is used to encrypt messages to Carlos.


It contains an SMIMECapabilities extension to indicate that Carlos's MUA
expects Elliptic Curve Diffie-Hellman (ECDH) with the HMAC-based Key
Derivation Function (HKDF) using SHA-256, and that it uses the AES-128 key wrap algorithm,
as indicated in <xref target="RFC8418" format="default" sectionFormat="of" derivedContent="RFC8418"/>.




</t>
        <sourcecode type="x509" name="carlos.encrypt.crt" markers="false" pn="section-7.3-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="carlos-decrypt-key" numbered="true" toc="include" removeInRFC="false" pn="section-7.4">
        <name slugifiedName="name-carloss-decryption-private-">Carlos's Decryption Private Key Material</name>
        <t indent="0" pn="section-7.4-1">This private key material is used by Carlos to decrypt messages.</t>
        <sourcecode type="pkcs8" name="carlos.encrypt.key" markers="false" pn="section-7.4-2">
-----BEGIN PRIVATE KEY-----
MC4CAQAwBQYDK2VuBCIEIIH5782H/otrhLy9Dtvzt79ffsvpcVXgdUczTdUvSQsK
-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-7.4-3">This secret key is the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the ASCII string
        <tt>draft-lamps-sample-certs-keygen.carlos.encrypt.25519.seed</tt>.</t>
      </section>
      <section anchor="pkcs12-object-for-carlos" numbered="true" toc="include" removeInRFC="false" pn="section-7.5">
        <name slugifiedName="name-pkcs-12-object-for-carlos">PKCS #12 Object for Carlos</name>
        <t indent="0" pn="section-7.5-1">This PKCS #12 (<xref target="RFC7292" format="default" sectionFormat="of" derivedContent="RFC7292"/>) object contains the same information as presented in Sections <xref target="ed25519-ca-cross-cert" format="counter" sectionFormat="of" derivedContent="6.3"/>, <xref target="carlos-verify-cert" format="counter" sectionFormat="of" derivedContent="7.1"/>, <xref target="carlos-sign-key" format="counter" sectionFormat="of" derivedContent="7.2"/>, <xref target="carlos-encrypt-cert" format="counter" sectionFormat="of" derivedContent="7.3"/>, and <xref target="carlos-decrypt-key" format="counter" sectionFormat="of" derivedContent="7.4"/>.

 
        </t>
        <t indent="0" pn="section-7.5-2">It is locked with the simple five-letter password <tt>carlos</tt>.</t>
        <sourcecode type="pkcs12" name="carlos.p12" markers="false" pn="section-7.5-3">
-----BEGIN PKCS12-----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-----END PKCS12-----
</sourcecode>
      </section>
    </section>
    <section anchor="danas-sample-certificates" numbered="true" toc="include" removeInRFC="false" pn="section-8">
      <name slugifiedName="name-danas-sample-certificates">Dana's Sample Certificates</name>
      <t indent="0" pn="section-8-1">Dana has the following information:</t>
      <dl indent="3" newline="false" spacing="normal" pn="section-8-2">
        <dt pn="section-8-2.1">Name:
</dt>
        <dd pn="section-8-2.2">
          <tt>Dana Hopper</tt>
        </dd>
        <dt pn="section-8-2.3">Email Address:
</dt>
        <dd pn="section-8-2.4">
          <tt>dna@smime.example</tt>
        </dd>
      </dl>
      <section anchor="dana-verify-cert" numbered="true" toc="include" removeInRFC="false" pn="section-8.1">
        <name slugifiedName="name-danas-signature-verificatio">Dana's Signature Verification End-Entity Certificate</name>
        <t indent="0" pn="section-8.1-1">This certificate is used for verification of signatures made by Dana.</t>
        <sourcecode type="x509" name="dana.sign.crt" markers="false" pn="section-8.1-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="dana-sign-key" numbered="true" toc="include" removeInRFC="false" pn="section-8.2">
        <name slugifiedName="name-danas-signing-private-key-m">Dana's Signing Private Key Material</name>
        <t indent="0" pn="section-8.2-1">This private key material is used by Dana to create signatures.</t>
        <sourcecode type="pkcs8" name="dana.sign.key" markers="false" pn="section-8.2-2">
-----BEGIN PRIVATE KEY-----
MC4CAQAwBQYDK2VwBCIEINZ8GPfmQh2AMp+uNIsZMbzvyTOltwvEt13usjnUaW4N
-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-8.2-3">This secret key is the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the ASCII string
        <tt>draft-lamps-sample-certs-keygen.dana.sign.25519.seed</tt>.</t>
      </section>
      <section anchor="dana-encrypt-cert" numbered="true" toc="include" removeInRFC="false" pn="section-8.3">
        <name slugifiedName="name-danas-encryption-end-entity">Dana's Encryption End-Entity Certificate</name>
        <t indent="0" pn="section-8.3-1">This certificate is used to encrypt messages to Dana.  It contains
        an SMIMECapabilities extension to indicate that Dana's MUA expects
        ECDH with HKDF using SHA-256, and that it uses the AES-128 key wrap algorithm, as
        indicated in <xref target="RFC8418" format="default" sectionFormat="of" derivedContent="RFC8418"/>.</t>
        <sourcecode type="x509" name="dana.encrypt.crt" markers="false" pn="section-8.3-2">
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</sourcecode>
      </section>
      <section anchor="dana-decrypt-key" numbered="true" toc="include" removeInRFC="false" pn="section-8.4">
        <name slugifiedName="name-danas-decryption-private-ke">Dana's Decryption Private Key Material</name>
        <t indent="0" pn="section-8.4-1">This private key material is used by Dana to decrypt messages.</t>
        <sourcecode type="pkcs8" name="dana.encrypt.key" markers="false" pn="section-8.4-2">
-----BEGIN PRIVATE KEY-----
MC4CAQAwBQYDK2VuBCIEIGxZt8L7lY48OEq4gs/smQ4weDhRNMlYHG21StivPfz3
-----END PRIVATE KEY-----
</sourcecode>
        <t indent="0" pn="section-8.4-3">This seed is the SHA-256 (<xref target="SHA" format="default" sectionFormat="of" derivedContent="SHA"/>) digest of the ASCII string <tt>draft-lamps-sample-certs-keygen.dana.encrypt.25519.seed</tt>.</t>
      </section>
      <section anchor="pkcs12-object-for-dana" numbered="true" toc="include" removeInRFC="false" pn="section-8.5">
        <name slugifiedName="name-pkcs-12-object-for-dana">PKCS #12 Object for Dana</name>
        <t indent="0" pn="section-8.5-1">This PKCS #12 (<xref target="RFC7292" format="default" sectionFormat="of" derivedContent="RFC7292"/>) object contains the same information as presented in Sections <xref target="ed25519-ca-cross-cert" format="counter" sectionFormat="of" derivedContent="6.3"/>, <xref target="dana-verify-cert" format="counter" sectionFormat="of" derivedContent="8.1"/>, <xref target="dana-sign-key" format="counter" sectionFormat="of" derivedContent="8.2"/>, <xref target="dana-encrypt-cert" format="counter" sectionFormat="of" derivedContent="8.3"/>, and <xref target="dana-decrypt-key" format="counter" sectionFormat="of" derivedContent="8.4"/>.   


        </t>
        <t indent="0" pn="section-8.5-2">It is locked with the simple four-letter password <tt>dana</tt>.</t>
        <sourcecode type="pkcs12" name="dana.p12" markers="false" pn="section-8.5-3">
-----BEGIN PKCS12-----
MIIKtgIBAzCCCn4GCSqGSIb3DQEHAaCCCm8EggprMIIKZzCCAu8GCSqGSIb3DQEH
BqCCAuAwggLcAgEAMIIC1QYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQMwDgQIZNqH
TA2APx0CAhQXgIICqK+HFHF6dF5qwlWM6MRCXw11VKrcYBff65iLABPyGvWENnVM
TTPpDLqbGm6Yd2eLntPZvJoVe5Sf2+DW4q3BZ9aKuEdneBBk8mDJ6/Lq1+wFxY5k
WaBHTA6LNml/NkM3za/fr4abKFQnu6DZgZDGbZh2BsgCMmO9TeHgZyepsh3WP4ZO
aYDvSD0LiEzerDPlOBgjYahcNLjv/Dn/dFxtOO3or010TTUoQCqeHJOoq3hJtSI+
8n0iXk6gtf1/ROj6JRt/3Aqz/mLMIhuxIg/5K1wxY9AwFT4oyflapNJozGg9qwGi
PWVtEy3QDNvAs3bDfiNQqAfJOEHv2z3Ran7sYuz3vE0FnPfA81oWbazlydjB0P/B
OQ+s6VLbsAosnZq9jv2ZVrCDaDAl/g7oD7fY8qmaC6O2q5/Z3KusfMt+r9En2v81
H2vjgrpxnDIXjYuLZdrnNE/slRtqadOGR/WQ358RG+yUmRUbHYHGnkjn9fOGLasI
ZUV0aowivcWyF/kR7QV3VVexgqJMX6k1vzSXRoJ/tnA+1/WPWy1mCJeljGOgYqSV
txtVB61Qmc2XP48F7wyaQZvdAU9zfe11/tHAaKKJWBpE1lIuAEkGtIP6ozYJBFjH
I11tBA8fijTnug+S4OvSgjtsRV/+kSEiW4F+pwE8RuTYfUu7q+Ew0LYdLgkH5OyE
sn0b62UFpR/E1D9exWzohrFbIdUCbjtssXucruAqPNhW/abT0zicWu5nvf+Pniow
2VxvhwoGt5jZ+lkaR5Z+1/GpbMgq47EUyGCgKv+5GAcJxUxINZqLbACJ/MhLfYPB
eJrXz8f5Cigm1wZLisYCqnuc8cGCXjNqNkUlqtzodM8xv4gcgT/zILxmJTZP2q4n
YA4yBQx5/n2G2dZC+pf3kAfbXcp0MIICpwYJKoZIhvcNAQcGoIICmDCCApQCAQAw
ggKNBgkqhkiG9w0BBwEwHAYKKoZIhvcNAQwBAzAOBAjxuoiaSZDbnwICFH+AggJg
k2hcNYtO0+15uLqXdiNhr5Q0JkYcrHdo0wR6G5AgLmwI+TYi+P8EZUjDIJ4TJ3b4
6xv7+3pT8cbEFf6PXcfS8/sCfM7FaV3SpLACLZbBJV52OKE0CAgALZOLuIz5mGVU
tWI2h1x587KeIv5GRPIxumDebT3Gmkkp9Qoi55hjTgn68olSgDaJF8o5wnfODhkS
o110a3x9OwkJSN1AXfmBfj33KnT8Dc4bTfAZy1S5o1zCtaEqnct2Urb4PeO3LfHB
ErBsvY8HE4D7qh6P5ftXHQHAx/b3hbU8jQP1tR0N9Oh0SiLi//ebCeGXWQRdVjL5
+VQrhlQF5d4Kz9Zx79oC36g7C2BxCQomur/F9TT12NPzPpaEGGo6ljB6myAHnYw9
rCxbSxBvbtEtlgJnxxb1Y5Q4ukgyjzK6431Bwq2+iNL0vGc9o2c5ELUPU9zGeLBZ
tXWvdX27aOHjusPfDZl70C5zHiYs1FU6Tkn9Aotc424Q3d2IRTTcYnnjs1VSi1Sr
4bRyB8zBAQmdQrniBW++7eJm3m/EOU0Yy0noUT169m8KNJrmSspMvKS6pyiYHR4I
BvAIkRIjvdtQvJdQJ+Uyr+HH5daE6golW1917b2bXj/41mvXYkJY6W8x0km1RYhH
QJZphWlvNcrHKo46Unk48Qc/5J5tI+6UDTXFr//V34vcpQ2ktp0MAKl1rBH549ef
CsGQTGoq8XHPhksehEEMRmOJDeKTVkKx8xNhbwb395yFCIxfF2NHeDLXP+JyW+nH
Iy2fnBDlyTiPF7YXyGiPjPAgK8LS8GUE+Zq2rWqrGNkwggM/BgkqhkiG9w0BBwag
ggMwMIIDLAIBADCCAyUGCSqGSIb3DQEHATAcBgoqhkiG9w0BDAEDMA4ECOfJ/s3Y
f5bgAgIUnYCCAvi4NaYP4lpAtuXtE02Zqgl9aLFwsj9B/rikBo6O1ZR/lsryJ4PJ
VGYy6NyBPjG67glJVMYiI3Hge+j66FXKXD/AaiMVD21ZmfrH935Sl4ZUKS9tpTJL
QDw3ejpDEDqJUFJZJ/ybgpRAKoNjhcE3B7F7+WMI8Pr70M1Fbw7ytUCAjOf18sIW
prUA8f8O9dLiGgiWyjE5HMzSXEib5IMRpq5x4Q28pBrT8rVYgoQSSyVkfHtU7LDi
Bm68RfBgEl7jIqLdrt2kKxHC3/lC4xXQgFNXeQO56aRp8Yu4VpoRwraVLUO3tJk+
pf1zFfmUei/JtiFlC6uf0PvC2B5h6kAZocE1lLxGIDFH7fTd6dzP7qTDbUQ+uEk3
qsgktT2pcoVnxTanvQmTCEZM9ZKCX5/z7Gkm+z83lGLDDU9oNyRSrxHrRBIvgH4w
3aGH1v6kfYOWwwwaghQOQIZFyzGVRKXsP7AslL+n4ti831TxqSUZX2qy9LpI4Tjp
5A/NLMKo3uqmHFlTLnnYUqoppe88FNY8T/LXnHp0KTkuXFmdKJtp1/ydqh18jBk7
nfLcQFdf1R/5okysblRtaMujlhelymT7MoM8u5C8ceIO7uWX8NI5B/IB+Yn2BvzZ
9LXoSia/wHjTu7UK610o7WOq9qTYe1i1x+HsmJaOC6hpaQh6b33VWDrHJbl7c/4Z
tvQ9qAzqkqIhFWMRXNK+32jFVAgXrD8U1QHW2ip5s7W/Xtm1AegrhG1nSQgJezYl
OnE/t2PDWuPeW94kR0uv1fNsh6plLyZYf/BaqhoGCHsa/ipD86viVSZDgJ8ASVLF
eLUK3HYFMhJ+MLEzZJffYZAOnbYoyNPNc0vc7dpbk+ZMnlb5bDFcMCpm7+fWOjsC
nsNNL9nqQlNHHCJRKGuxO5rujftbPM7R3GLT9d/u5e9YY5cX0RiDLxomFfflj2Yh
uRoyX+8WzESt98I/KmAraWKXnxOP1FEWajtNCrnGCezDKO3xEHTQhECpg+z7O4mj
MjN6MIHABgkqhkiG9w0BBwGggbIEga8wgawwgakGCyqGSIb3DQEMCgECoFowWDAc
BgoqhkiG9w0BDAEDMA4ECL2Bz1vW+YZkAgIUugQ4YOyEjke53NDvCFR0ciUHZ7re
f9/wPx5TgV3qzGhfR4bP2rdpiOt9hAHVK5cmUAR7+wjAJiYdLUQxPjAXBgkqhkiG
9w0BCRQxCh4IAGQAYQBuAGEwIwYJKoZIhvcNAQkVMRYEFJ3fTdQF75rsYIa8J20E
6c5a3I+kMIHABgkqhkiG9w0BBwGggbIEga8wgawwgakGCyqGSIb3DQEMCgECoFow
WDAcBgoqhkiG9w0BDAEDMA4ECFw78Uk8K64uAgIU+gQ4id0jRb3JyEM5fdpaeQR+
YEeMn+Y5KavplVD5HtgQQY9hhppbQqG4af7KY+MT6xus6oNEQeJAE5wxPjAXBgkq
hkiG9w0BCRQxCh4IAGQAYQBuAGEwIwYJKoZIhvcNAQkVMRYEFEgDhsFpuHhtrt7z
zAawM6xXMt2WMC8wHzAHBgUrDgMCGgQUzSoHpcIerV21CvCOjAe5ZVhs2M8ECC5D
kkzl2MltAgIoAA==
-----END PKCS12-----
</sourcecode>
      </section>
    </section>
    <section anchor="security-considerations" numbered="true" toc="include" removeInRFC="false" pn="section-9">
      <name slugifiedName="name-security-considerations">Security Considerations</name>
      <t indent="0" pn="section-9-1">The keys presented in this document should be considered compromised and insecure, because the secret key material is published and therefore not secret.</t>
      <t indent="0" pn="section-9-2">Any application that maintains a deny list of invalid key material should include these keys in its list.</t>
    </section>
    <section anchor="iana-considerations" numbered="true" toc="include" removeInRFC="false" pn="section-10">
      <name slugifiedName="name-iana-considerations">IANA Considerations</name>
      <t indent="0" pn="section-10-1">This document has no IANA actions.</t>
    </section>
  </middle>
  <back>
    <displayreference target="I-D.bre-openpgp-samples" to="OPENPGP-SAMPLES"/>
    <references pn="section-11">
      <name slugifiedName="name-references">References</name>
      <references pn="section-11.1">
        <name slugifiedName="name-normative-references">Normative References</name>
        <reference anchor="RFC5280" target="https://www.rfc-editor.org/info/rfc5280" quoteTitle="true" derivedAnchor="RFC5280">
          <front>
            <title>Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile</title>
            <author initials="D." surname="Cooper" fullname="D. Cooper">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Santesson" fullname="S. Santesson">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Farrell" fullname="S. Farrell">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Boeyen" fullname="S. Boeyen">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="R." surname="Housley" fullname="R. Housley">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="W." surname="Polk" fullname="W. Polk">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2008" month="May"/>
            <abstract>
              <t indent="0">This memo profiles the X.509 v3 certificate and X.509 v2 certificate revocation list (CRL) for use in the Internet.  An overview of this approach and model is provided as an introduction.  The X.509 v3 certificate format is described in detail, with additional information regarding the format and semantics of Internet name forms.  Standard certificate extensions are described and two Internet-specific extensions are defined.  A set of required certificate extensions is specified.  The X.509 v2 CRL format is described in detail along with standard and Internet-specific extensions.  An algorithm for X.509 certification path validation is described.  An ASN.1 module and examples are provided in the appendices.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="5280"/>
          <seriesInfo name="DOI" value="10.17487/RFC5280"/>
        </reference>
        <reference anchor="RFC5958" target="https://www.rfc-editor.org/info/rfc5958" quoteTitle="true" derivedAnchor="RFC5958">
          <front>
            <title>Asymmetric Key Packages</title>
            <author initials="S." surname="Turner" fullname="S. Turner">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2010" month="August"/>
            <abstract>
              <t indent="0">This document defines the syntax for private-key information and a content type for it.  Private-key information includes a private key for a specified public-key algorithm and a set of attributes.  The Cryptographic Message Syntax (CMS), as defined in RFC 5652, can be used to digitally sign, digest, authenticate, or encrypt the asymmetric key format content type.  This document obsoletes RFC 5208.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="5958"/>
          <seriesInfo name="DOI" value="10.17487/RFC5958"/>
        </reference>
        <reference anchor="RFC7292" target="https://www.rfc-editor.org/info/rfc7292" quoteTitle="true" derivedAnchor="RFC7292">
          <front>
            <title>PKCS #12: Personal Information Exchange Syntax v1.1</title>
            <author initials="K." surname="Moriarty" fullname="K. Moriarty" role="editor">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="M." surname="Nystrom" fullname="M. Nystrom">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Parkinson" fullname="S. Parkinson">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="A." surname="Rusch" fullname="A. Rusch">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="M." surname="Scott" fullname="M. Scott">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2014" month="July"/>
            <abstract>
              <t indent="0">PKCS #12 v1.1 describes a transfer syntax for personal identity information, including private keys, certificates, miscellaneous secrets, and extensions.  Machines, applications, browsers, Internet kiosks, and so on, that support this standard will allow a user to import, export, and exercise a single set of personal identity information.  This standard supports direct transfer of personal information under several privacy and integrity modes.</t>
              <t indent="0">This document represents a republication of PKCS #12 v1.1 from RSA Laboratories' Public Key Cryptography Standard (PKCS) series.  By publishing this RFC, change control is transferred to the IETF.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7292"/>
          <seriesInfo name="DOI" value="10.17487/RFC7292"/>
        </reference>
        <reference anchor="RFC7468" target="https://www.rfc-editor.org/info/rfc7468" quoteTitle="true" derivedAnchor="RFC7468">
          <front>
            <title>Textual Encodings of PKIX, PKCS, and CMS Structures</title>
            <author initials="S." surname="Josefsson" fullname="S. Josefsson">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Leonard" fullname="S. Leonard">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2015" month="April"/>
            <abstract>
              <t indent="0">This document describes and discusses the textual encodings of the Public-Key Infrastructure X.509 (PKIX), Public-Key Cryptography Standards (PKCS), and Cryptographic Message Syntax (CMS).  The textual encodings are well-known, are implemented by several applications and libraries, and are widely deployed.  This document articulates the de facto rules by which existing implementations operate and defines them so that future implementations can interoperate.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7468"/>
          <seriesInfo name="DOI" value="10.17487/RFC7468"/>
        </reference>
        <reference anchor="RFC8032" target="https://www.rfc-editor.org/info/rfc8032" quoteTitle="true" derivedAnchor="RFC8032">
          <front>
            <title>Edwards-Curve Digital Signature Algorithm (EdDSA)</title>
            <author initials="S." surname="Josefsson" fullname="S. Josefsson">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="I." surname="Liusvaara" fullname="I. Liusvaara">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2017" month="January"/>
            <abstract>
              <t indent="0">This document describes elliptic curve signature scheme Edwards-curve Digital Signature Algorithm (EdDSA).  The algorithm is instantiated with recommended parameters for the edwards25519 and edwards448 curves.  An example implementation and test vectors are provided.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8032"/>
          <seriesInfo name="DOI" value="10.17487/RFC8032"/>
        </reference>
        <reference anchor="RFC8479" target="https://www.rfc-editor.org/info/rfc8479" quoteTitle="true" derivedAnchor="RFC8479">
          <front>
            <title>Storing Validation Parameters in PKCS#8</title>
            <author initials="N." surname="Mavrogiannopoulos" fullname="N. Mavrogiannopoulos">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2018" month="September"/>
            <abstract>
              <t indent="0">This memo describes a method of storing parameters needed for private-key validation in the Private-Key Information Syntax Specification as defined in PKCS#8 format (RFC 5208).  It is equally applicable to the alternative implementation of the Private-Key Information Syntax Specification as defined in RFC 5958.</t>
              <t indent="0">The approach described in this document encodes the parameters under a private enterprise extension and does not form part of a formal standard.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8479"/>
          <seriesInfo name="DOI" value="10.17487/RFC8479"/>
        </reference>
        <reference anchor="RFC8551" target="https://www.rfc-editor.org/info/rfc8551" quoteTitle="true" derivedAnchor="RFC8551">
          <front>
            <title>Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Message Specification</title>
            <author initials="J." surname="Schaad" fullname="J. Schaad">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="B." surname="Ramsdell" fullname="B. Ramsdell">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="S." surname="Turner" fullname="S. Turner">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2019" month="April"/>
            <abstract>
              <t indent="0">This document defines Secure/Multipurpose Internet Mail Extensions (S/MIME) version 4.0.  S/MIME provides a consistent way to send and receive secure MIME data.  Digital signatures provide authentication, message integrity, and non-repudiation with proof of origin. Encryption provides data confidentiality.  Compression can be used to reduce data size.  This document obsoletes RFC 5751.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8551"/>
          <seriesInfo name="DOI" value="10.17487/RFC8551"/>
        </reference>
      </references>
      <references pn="section-11.2">
        <name slugifiedName="name-informative-references">Informative References</name>
        <reference anchor="FIPS186-4" target="https://doi.org/10.6028/NIST.FIPS.186-4" quoteTitle="true" derivedAnchor="FIPS186-4">
          <front>
            <title>Digital Signature Standard (DSS)</title>
            <author>
              <organization showOnFrontPage="true">National Institute of Standards and Technology (NIST)</organization>
            </author>
            <date month="July" year="2013"/>
          </front>
          <seriesInfo name="FIPS PUB" value="186-4"/>
          <seriesInfo name="DOI" value="10.6028/NIST.FIPS.186-4"/>
        </reference>
        <reference anchor="I-D.bre-openpgp-samples" quoteTitle="true" target="https://datatracker.ietf.org/doc/html/draft-bre-openpgp-samples-01" derivedAnchor="OPENPGP-SAMPLES">
          <front>
            <title>OpenPGP Example Keys and Certificates</title>
            <author fullname="Bjarni Rúnar Einarsson">
              <organization showOnFrontPage="true">Mailpile ehf</organization>
            </author>
            <author fullname="juga">
              <organization showOnFrontPage="true">Independent</organization>
            </author>
            <author fullname="Daniel Kahn Gillmor">
              <organization showOnFrontPage="true">American Civil Liberties Union</organization>
            </author>
            <date month="December" day="20" year="2019"/>
            <abstract>
              <t indent="0">   The OpenPGP development community benefits from sharing samples of
   signed or encrypted data.  This document facilitates such
   collaboration by defining a small set of OpenPGP certificates and
   keys for use when generating such samples.

              </t>
            </abstract>
          </front>
          <seriesInfo name="Internet-Draft" value="draft-bre-openpgp-samples-01"/>
          <format type="TXT" target="https://www.ietf.org/archive/id/draft-bre-openpgp-samples-01.txt"/>
          <refcontent>Work in Progress</refcontent>
        </reference>
        <reference anchor="RFC4134" target="https://www.rfc-editor.org/info/rfc4134" quoteTitle="true" derivedAnchor="RFC4134">
          <front>
            <title>Examples of S/MIME Messages</title>
            <author initials="P." surname="Hoffman" fullname="P. Hoffman" role="editor">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2005" month="July"/>
            <abstract>
              <t indent="0">This document gives examples of message bodies formatted using S/MIME. Specifically, it has examples of Cryptographic Message Syntax (CMS) objects and S/MIME messages (including the MIME formatting).  It includes examples of many common CMS formats.  The purpose of this document is to help increase interoperability for S/MIME and other protocols that rely on CMS.  This memo provides information for the Internet community.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="4134"/>
          <seriesInfo name="DOI" value="10.17487/RFC4134"/>
        </reference>
        <reference anchor="RFC5322" target="https://www.rfc-editor.org/info/rfc5322" quoteTitle="true" derivedAnchor="RFC5322">
          <front>
            <title>Internet Message Format</title>
            <author initials="P." surname="Resnick" fullname="P. Resnick" role="editor">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2008" month="October"/>
            <abstract>
              <t indent="0">This document specifies the Internet Message Format (IMF), a syntax for text messages that are sent between computer users, within the framework of "electronic mail" messages.  This specification is a revision of Request For Comments (RFC) 2822, which itself superseded Request For Comments (RFC) 822, "Standard for the Format of ARPA Internet Text Messages", updating it to reflect current practice and incorporating incremental changes that were specified in other RFCs.  [STANDARDS-TRACK]</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="5322"/>
          <seriesInfo name="DOI" value="10.17487/RFC5322"/>
        </reference>
        <reference anchor="RFC7469" target="https://www.rfc-editor.org/info/rfc7469" quoteTitle="true" derivedAnchor="RFC7469">
          <front>
            <title>Public Key Pinning Extension for HTTP</title>
            <author initials="C." surname="Evans" fullname="C. Evans">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="C." surname="Palmer" fullname="C. Palmer">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="R." surname="Sleevi" fullname="R. Sleevi">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2015" month="April"/>
            <abstract>
              <t indent="0">This document defines a new HTTP header that allows web host operators to instruct user agents to remember ("pin") the hosts' cryptographic identities over a period of time.  During that time, user agents (UAs) will require that the host presents a certificate chain including at least one Subject Public Key Info structure whose fingerprint matches one of the pinned fingerprints for that host.  By effectively reducing the number of trusted authorities who can authenticate the domain during the lifetime of the pin, pinning may reduce the incidence of man-in-the-middle attacks due to compromised Certification Authorities.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="7469"/>
          <seriesInfo name="DOI" value="10.17487/RFC7469"/>
        </reference>
        <reference anchor="RFC8410" target="https://www.rfc-editor.org/info/rfc8410" quoteTitle="true" derivedAnchor="RFC8410">
          <front>
            <title>Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure</title>
            <author initials="S." surname="Josefsson" fullname="S. Josefsson">
              <organization showOnFrontPage="true"/>
            </author>
            <author initials="J." surname="Schaad" fullname="J. Schaad">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2018" month="August"/>
            <abstract>
              <t indent="0">This document specifies algorithm identifiers and ASN.1 encoding formats for elliptic curve constructs using the curve25519 and curve448 curves.  The signature algorithms covered are Ed25519 and Ed448.  The key agreement algorithms covered are X25519 and X448. The encoding for public key, private key, and Edwards-curve Digital Signature Algorithm (EdDSA) structures is provided.</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8410"/>
          <seriesInfo name="DOI" value="10.17487/RFC8410"/>
        </reference>
        <reference anchor="RFC8418" target="https://www.rfc-editor.org/info/rfc8418" quoteTitle="true" derivedAnchor="RFC8418">
          <front>
            <title>Use of the Elliptic Curve Diffie-Hellman Key Agreement Algorithm with X25519 and X448 in the Cryptographic Message Syntax (CMS)</title>
            <author initials="R." surname="Housley" fullname="R. Housley">
              <organization showOnFrontPage="true"/>
            </author>
            <date year="2018" month="August"/>
            <abstract>
              <t indent="0">This document describes the conventions for using the Elliptic Curve Diffie-Hellman (ECDH) key agreement algorithm with curve25519 and curve448 in the Cryptographic Message Syntax (CMS).</t>
            </abstract>
          </front>
          <seriesInfo name="RFC" value="8418"/>
          <seriesInfo name="DOI" value="10.17487/RFC8418"/>
        </reference>
        <reference anchor="SHA" target="https://doi.org/10.6028/NIST.FIPS.180-4" quoteTitle="true" derivedAnchor="SHA">
          <front>
            <title>Secure Hash Standard (SHS)</title>
            <author>
              <organization showOnFrontPage="true">National Institute of Standards and Technology (NIST)</organization>
            </author>
            <date month="August" year="2015"/>
          </front>
          <seriesInfo name="FIPS PUB" value="180-4"/>
          <seriesInfo name="DOI" value="10.6028/NIST.FIPS.180-4"/>
        </reference>
        <reference anchor="TEST-POLICY" target="https://csrc.nist.gov/CSRC/media/Projects/Computer-Security-Objects-Register/documents/test_policy.pdf" quoteTitle="true" derivedAnchor="TEST-POLICY">
          <front>
            <title>Test Certificate Policy to Support PKI Pilots and Testing</title>
            <author>
              <organization showOnFrontPage="true">National Institute of Standards and Technology (NIST)</organization>
            </author>
            <date year="2012" month="May"/>
          </front>
          <refcontent>Computer Security Resource Center</refcontent>
        </reference>
      </references>
    </references>
    <section anchor="acknowledgements" numbered="false" toc="include" removeInRFC="false" pn="section-appendix.a">
      <name slugifiedName="name-acknowledgements">Acknowledgements</name>
      <t indent="0" pn="section-appendix.a-1">This document was inspired by similar work in the OpenPGP space by <contact fullname="Bjarni Rúnar Einarsson"/> and <contact fullname="juga"/>; see <xref target="I-D.bre-openpgp-samples" format="default" sectionFormat="of" derivedContent="OPENPGP-SAMPLES"/>.</t>
      <t indent="0" pn="section-appendix.a-2"><contact fullname="Eric Rescorla"/> helped spot issues with certificate formats.</t>
      <t indent="0" pn="section-appendix.a-3"><contact fullname="Sean Turner"/> pointed to <xref target="RFC4134" format="default" sectionFormat="of" derivedContent="RFC4134"/> as prior work.</t>
      <t indent="0" pn="section-appendix.a-4"><contact fullname="Deb Cooley"/> suggested that Alice and Bob should have separate certificates for signing and encryption.</t>
      <t indent="0" pn="section-appendix.a-5"><contact fullname="Wolfgang Hommel"/> helped to build reproducible encrypted PKCS #12 objects.</t>
      <t indent="0" pn="section-appendix.a-6"><contact fullname="Carsten Bormann"/> got the XML <tt>sourcecode</tt> markup working for this document.</t>
      <t indent="0" pn="section-appendix.a-7"><contact fullname="David A. Cooper"/> identified problems with the certificates and suggested corrections.</t>
      <t indent="0" pn="section-appendix.a-8"><contact fullname="Lijun Liao"/> helped get the terminology right.</t>
      <t indent="0" pn="section-appendix.a-9"><contact fullname="Stewart Bryant"/> and <contact fullname="Roman Danyliw"/> provided editorial suggestions.</t>
    </section>
    <section anchor="authors-addresses" numbered="false" removeInRFC="false" toc="include" pn="section-appendix.b">
      <name slugifiedName="name-authors-address">Author's Address</name>
      <author initials="D. K." surname="Gillmor" fullname="Daniel Kahn Gillmor" role="editor">
        <organization abbrev="ACLU" showOnFrontPage="true">American Civil Liberties Union</organization>
        <address>
          <postal>
            <street>125 Broad St.</street>
            <city>New York</city>
            <region>NY</region>
            <code>10004</code>
            <country>United States of America</country>
          </postal>
          <email>dkg@fifthhorseman.net</email>
        </address>
      </author>
    </section>
  </back>
</rfc>
