Lightweight Directory Access Protocol (LDAP) Schema Definitions for X.509 Certificates
Kurt D. Zeilenga · 2006
This document describes schema for representing X.509 certificates, X.521 security information, and related elements in directories accessible using the Lightweight Directory Access Protocol (LDAP).The LDAP definitions for these X. 509 and X.521 schema elements replace those provided in RFCs 2252 and 2256.This document, together with [RFC4510], obsoletes RFCs 2252 and 2256 in their entirety.The changes (in this document) made since RFC 2252 and RFC 2256 include: -addition of pkiUser, pkiCA, and deltaCRL classes; Zeilenga Standards Track [Page 1] RFC 4523 LDAP X.509 Schema June 2006 -update of attribute types to include equality matching rules in accordance with their X.500 specifications; -addition of certificate, certificate pair, certificate list, and algorithm identifier matching rules; and -addition of LDAP syntax for assertion syntaxes for these matching rules.This document obsoletes RFC 2587.The X.509 schema descriptions for LDAPv2 [RFC1777] are Historic, as is LDAPv2 [RFC3494].