<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet type="text/xsl" href="pkix-parameters.xsl"?>
<?xml-model href="pkix-parameters.rng" schematypens="http://relaxng.org/ns/structure/1.0" ?>
<registry xmlns="http://www.iana.org/assignments" id="pkix-parameters">
  <title>Public Key Infrastructure using X.509 (PKIX) Parameters</title>
  <created>2003-12-23</created>
  <updated>2023-10-16</updated>
  
  <registry id="srv-protocol-labels">
    <title>PKIX SRV Protocol Labels</title>
    <xref type="rfc" data="rfc4386"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Unassigned</expert>
    <record>
      <name>_PKIXREP</name>
      <xref type="rfc" data="rfc4386"/>
    </record>
  </registry>
  
  <registry id="caa-properties">
    <title>Certification Authority Restriction Properties</title>
    <xref type="rfc" data="rfc8659"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Phillip Hallam-Baker</expert>
    <record>
      <name>issue</name>
      <description>Authorization Entry by Domain</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
    <record>
      <name>issuewild</name>
      <description>Authorization Entry by Wildcard Domain</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
    <record>
      <name>iodef</name>
      <description>Report incident by IODEF report</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
    <record>
      <name>auth</name>
      <description>Reserved</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
    <record>
      <name>path</name>
      <description>Reserved</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
    <record>
      <name>policy</name>
      <description>Reserved</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
    <record date="2019-02-22">
      <name>contactemail</name>
      <description>Authorized e-mail contact for domain validation</description>
      <xref type="uri" data="https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.6.3.pdf">CA/Browser Forum 1.6.3</xref>
      <xref type="person" data="CA_Browser_Forum"/>
    </record>
    <record date="2019-02-27">
      <name>contactphone</name>
      <description>Authorized phone contact for DNS validation</description>
      <xref type="uri" data="https://cabforum.org/pipermail/public/2019-January/014498.html">CA/Browser Forum Ballot SC14</xref>
      <xref type="person" data="CA_Browser_Forum"/>
    </record>
    <record date="2021-08-17">
      <name>issuevmc</name>
      <description>Authorization Entry by Domain for Verified Mark Certificates</description>
      <xref type="uri" data="https://bimigroup.org/resources/VMC_Guidelines_latest.pdf">VMC Requirements v1.0</xref>
      <xref type="person" data="Corey_Bonnell"/>
    </record>
    <record date="2023-08-17">
      <name>issuemail</name>
      <description>Authorization Entry by Email Address</description>
      <xref type="rfc" data="rfc9495"/>
    </record>
  </registry>
  
  <registry id="caa-flags">
    <title>Certification Authority Restriction Flags</title>
    <xref type="rfc" data="rfc8659"/>
    <registration_rule>RFC Required</registration_rule>
    <record>
      <value>0</value>
      <description>Issuer Critical Flag</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
    <record>
      <value>1-7</value>
      <description>Unassigned</description>
      <xref type="rfc" data="rfc8659"/>
    </record>
  </registry>
  
  <people>
    <person id="CA_Browser_Forum">
      <name>CA/Browser Forum</name>
      <uri>mailto:questions&amp;cabforum.org</uri>
      <updated>2019-02-22</updated>
    </person>
    <person id="Corey_Bonnell">
      <name>Corey Bonnell</name>
      <uri>mailto:corey.bonnell&amp;digicert.com</uri>
      <updated>2021-08-17</updated>
    </person>
  </people>
</registry>
