FBCA CP Section 6.3.2, Certificate Operational Periods/Key Usage Periods, v1.0

Profile of requirements for the Federal Bridge Certificate Authority (FBCA) Certificate Policy (CP), FBCA CP Section 6.3.2, Certificate Operational Periods/Key Usage Periods
Publication Date 2018-10-30
Issuing Organization
No Responder help@trustmarkinitiative.org 404-407-8956 75 5th Street NW, Suite 900, Atlanta, GA 30308
Keywords PIV-I, Security, Identity, Federal Bridge
Legal Notice This document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.
Loading...

Trust Expression:

TD_PrivateKeyLifetimeForSelfSignedTrustAnchorPKICertificates and TD_CertificateLifetimeForSelfSignedTrustAnchorPKICertificates and TD_PrivateKeyLifetimeForPKICertificateAuthorityIssuedSubscriberCertificates and TD_PrivateKeyLifetimeForKeysUsedToSignPKICertificateRevocartionLists and TD_PrivateKeyLifetimeForKeysUsedToIssuePKIOCSPResponderCertificates and TD_PrivateKeyLifetimeForCodeAndContentSigningPKICertificates and TD_PublicKeyLifetimeForCodeAndContentSigningPKICertificates and TD_CertificateandPrivateKeyLifetimeforSubscriberPKISigningCertificates and TD_PKISubscriberKeyManagementCertificateLifetime and TD_PIVISubscriberCertificateExpiration and TD_PKICertificateStatusServerCertificateValidityPeriod and TD_PKISubscriberCertificateLimitsDoNotExceedThoseOfTheIssuingCertificateAuthorityCertificate and TD_PKISubscriberCertificateValidityPeriodDoesNotExceedReKeyIdentityRequirements

References (13)

 TD  Private Key Lifetime For Self-Signed Trust Anchor PKI Certificates, v1.0
Description Addresses the requirements for limiting the lifetime of private keys for self-signed PKI certificates used as trust anchors.
ID TD_PrivateKeyLifetimeForSelfSignedTrustAnchorPKICertificates
Provider Reference
 TD  Certificate Lifetime For Self-Signed Trust Anchor PKI Certificates, v1.0
Description Addresses the requirements for limiting the lifetime of self-signed PKI certificates used as trust anchors.
ID TD_CertificateLifetimeForSelfSignedTrustAnchorPKICertificates
Provider Reference
 TD  Private Key Lifetime For PKI Certificate Authority Issued Subscriber Certificates, v1.0
Description Addresses the requirements for limiting the lifetime of private keys for PKI certificates used to issue subscriber certificates.
ID TD_PrivateKeyLifetimeForPKICertificateAuthorityIssuedSubscriberCertificates
Provider Reference
 TD  Private Key Lifetime For Keys Used To Sign PKI Certificate Revocartion Lists, v1.0
Description Addresses the requirements for limiting the lifetime of private keys used to sign PKI Certificate Revocation Lists.
ID TD_PrivateKeyLifetimeForKeysUsedToSignPKICertificateRevocartionLists
Provider Reference
 TD  Private Key Lifetime For Keys Used To Issue PKI OCSP Responder Certificates, v1.0
Description Addresses the requirements for limiting the lifetime of private keys used to issue PKI OCSP responder certificates.
ID TD_PrivateKeyLifetimeForKeysUsedToIssuePKIOCSPResponderCertificates
Provider Reference
 TD  Private Key Lifetime For Code And Content Signing PKI Certificates, v1.0
Description Addresses the requirements for limiting the lifetime of private keys for PKI certificates used to sign code and content.
ID TD_PrivateKeyLifetimeForCodeAndContentSigningPKICertificates
Provider Reference
 TD  Public Key Lifetime For Code And Content Signing PKI Certificates, v1.0
Description Addresses the requirements for limiting the lifetime of public keys for PKI certificates used to sign code and content.
ID TD_PublicKeyLifetimeForCodeAndContentSigningPKICertificates
Provider Reference
 TD  Certificate and Private Key Lifetime for Subscriber PKI Signing Certificates, v1.0
Description Addresses the requirements for limiting the lifetime of PKI subscriber signing certificates and their private keys.
ID TD_CertificateandPrivateKeyLifetimeforSubscriberPKISigningCertificates
Provider Reference
 TD  PKI Subscriber Key Management Certificate Lifetime, v1.0
Description Addresses the requirements for limiting the lifetime of PKI subscriber key management certificates.
ID TD_PKISubscriberKeyManagementCertificateLifetime
Provider Reference
 TD  PIV-I Subscriber Certificate Expiration, v1.0
Description Addresses the requirements for the expiration of PIV-I subscriber certificates.
ID TD_PIVISubscriberCertificateExpiration
Provider Reference
 TD  PKI Certificate Status Server Certificate Validity Period, v1.0
Description Addresses the requirements for limiting the validity period of PKI Certificate Status Server certificates that provide revocation status.
ID TD_PKICertificateStatusServerCertificateValidityPeriod
Provider Reference
 TD  PKI Subscriber Certificate Limits Do Not Exceed Those Of The Issuing Certificate Authority Certificate, v1.0
Description Addresses the requirement for CAs must not issue subscriber certificates that extend beyond the expiration date of their own certificates and public keys.
ID TD_PKISubscriberCertificateLimitsDoNotExceedThoseOfTheIssuingCertificateAuthorityCertificate
Provider Reference
 TD  PKI Subscriber Certificate Validity Period Does Not Exceed Re-Key Identity Requirements, v1.0
Description Addresses requirements for the validity of PKI subscriber certificates to not exceed routine re-key identity requirements.
ID TD_PKISubscriberCertificateValidityPeriodDoesNotExceedReKeyIdentityRequirements
Provider Reference
Also available as XML or JSON