Public Key Infrastructure

This page is a subsection of the Crypto link farm. Links to further crypto and security-related information can be found there.

128i: New Zealand CA.
Access Certificates for Electronic Services: US government PKI initiative.
Analysing State Digital Signature Legislation: Analysis and comparison of various states' digital signature laws.
AlphaTrust.com Home Page: US CA.
ARCANVS: CA licensed under the Utah Digital Signature Act.
Architecture for Public-Key Infrastructure (APKI): Open Group PKI requirements (requires registration to access).
Australia Post - KeyPOST: Australian CA.
Baker & McKenzie: e-commerce legislation, regulations, studies, and related information.
BelSign: Belgium and Luxemburg CA.
BiNARY SuRGEONS: Certification Services: South African CA.
BSI-Projekt Digitale Signatur: Implementation details of the German digital signature law.
C=EE, O=ESTONIAN NATIONAL PCA: Estonian CA.
CA-CERT: Spanish CA.
CALiability analysis Web doc: ABA analysis of CA liability issues (~190 pages).
Carynet Security Certificate Authority: Asian(?) CA.
CBL Worldkey; The Only Secured Global Trading Network: Swiss CA.
Center for Standards Public Key Infrastructure (PKI) Standardization Home Page: DISA information pages on the Internet PKI.
Certificates Australia: Australian CA. GAK alert: This CA was formerly run by Security Domain and escrowed all encryption keys, then it was absorbed by Baltimore and doesn't escrow them any more but backs them up instead.
Certificates shipped with Netscape: Extracting certs from Netscape's .db files.
Certification Authority Survey (DGXV Project): List of CA's worldwide.
certifikacni stranka DATANETu: Czech DATANET CA.
CERTISIGN: Brazilian CA.
Cisco System's Simple Certificate Enrollment Protocol: Cisco's PKCS #10/PKCS #7-based certificate enrolment protocol.
Columbia Certification Authority: Columbia University (not country) CA.
Columbian Draft Proposal of Law on Electronic Commerce: Columbian draft digital signature legislation.
CompuSource Certificate Authorities Home Page: South African CA.
DigiNotar - notariële diensten voor het Internet: Dutch CA.
Digital Signature Guidelines: American Bar Association digital signature guidelines, available as WordPerfect and Word documents.
Digital Signature Legislation: Comprehensive collection of links to digital signature legislation worldwide.
Digital Signature Trust (DST) Home Page: CA licensed under the Utah Digital Signature Act.
Dunkel Certification Authority: German CA.
European Framework for Digital Signatures And Encryption: Proposed EC framework for digital signatures and encryption.
Florida Digital Signatures - Final Report: Final report on the Florida digital signature guidelines.
Electronic Signature: Spanish digital signature law.
European Electronic Signature Standardisation Initiative: EC initiative on standardised digital signature framework.
European ICE-TEL Project: PKI for Europe
freecerts.com: Free WTLS certificates.
Gatekeeper: Australian PKI project.
Global Trust Register: Global trust register for public keys in molecular form.
GlobalSign - Trust On The Net: European CA.
Government Public Key Authority: Australian government PKI project.
GTE CyberTrust Home: GTE CA.
Home Banking Computer Interface: German initiative for computerised home banking.
IAIK - ICE-TEL Information Service: Austrian CA.
IBM Registry and World Registry: IBM CA and PKI products.
ICAT Home Page: Japanese CA.
ICE-TEL: Top-level CA for European ICE-TEL CA infrastructure.
ICE-TEL Certification Infrastructure: European CA.
ID.EE: Combination Estonian electronic ID card page and world's shortest URL.
IETF-PKIX Qualified Certificates: X.509/PKIX profile for certificates specifically adapted for digital signature applications where the signatures need recognition equivalent to handwritten signatures.
IKS Zertifizierungsinstanz: IKS CA.
ILPF: Digital Signature Working Group: Initiative to harmonize dozens of incompatible digital signature laws.
Individual Network: IN certification authority.
Installing certificates and root keys in Internet Explorer and IIS: Instructions on installing certificates into MSIE.
Inter Clear - The UK's first Certificate Authority: UK CA.
Introducing SSL and Certificates using SSLeay: Nice introduction to cryptographic techniques, certificates, SSL, and SSLeay.
Internet PCA Registration Authority: IPCA public key.
IPS Seguridad: Spanish CA.
ITU-T Study Group 10 - Languages for Telecommunication Systems: X.680 and X.690 ASN.1 standards series documents.
Janus's homepage: PKI, PKCS #11, LDAP, general security links.
Keyserver.de: Web-based PGP keyserver.
KeyTrust: German KeyTrust CA (part of the MailTrusT initiative).
Keywitness Canada: Canadian CA.
KMD-CAs certificeringscenter: Danish CA.
Kommunedatas certificeringscenter: Danish CA.
Legislating Market Winners: Paper which examines problems with existing PKI legislation.
MA.US/ITD/LEGAL: Massachusetts digital siganture and online commerce guidelines and information.
MC Home Page: The meta-certificate group (an alternative to X.509/PKIX-type certificates).
Minimum Interoperability Specifications for PKI Components: NIST PKI profile.
NZPKAF: New Zealand PKI work.
Object Identifiers Registry #1: Large collection of ASN.1 object identifiers.
Object Identifiers Registry #2: Searchable collection of object identifiers.
OCSP++ - An On-line Certificate Status Protocol: Modification of OCSP to provide a more workable system.
OnWatch Service - Public Key & Security Ref.: Bell Sygma CA.
OpenLDAP: Free LDAP server/client (update of UMich software).
OpenPathCA: Siemens CA toolkit.
Organization of Black Helicopters!: Free S/MIME certificates.
Payment, Security & Internet References, Lynn Wheeler: X9.59 electronic payment-related references.
Pequi: Experimental PKIX implementation.
PGP Keyserver Interface: WWW interface to the PGP keyservers.
PGP Public Key Server: One of several web-based PGP key servers.
PGP Public Key Server for Yashy-hack and PGP-Users: Web interface for PGP key server.
PKAF: Australian PKI initiative.
PKI Forum: Members-only PKI glee club.
PKI Security Tutorial: Good tutorial on PKI security issues.
PKIX Working Group: PKIX WG mailing list and document archive.
Policy Certification Authority [DFN-PCA] Home Page: German CA.
Politecnico di Torino: ICE-TEL: Italian CA.
Public Key Authentication Framework: Tutorial: A tutorial on PKI.
Public Key Infrastructure: NIST's PKI information page - interoperability guidelines, PKI panels and overviews, PKI documents.
Public-Key Infrastructure (PKIX) home page: Home page of the PKIX working group.
Public-Key Infrastructure Standards: Slides from a talk on PKI standards and work in progress.
Regole tecniche per la formazione [...], anche temporale, dei documenti informatici: Italian digital signature law. This site uses weird URL's which don't always work, there's an alternative copy at http://www.interlex.com/testi/regtecn.htm. Another part in English is at http://www.aipa.it/english[4/law[3/pdecree51397.asp.
Regulierungsbehörde für Telekommunikation und Post - Digitale Signatur: Digital signature information published by the German telecoms/post regulation authority.
Roger Clarke's PKI Position Statement: PKI position statement including links to papers on the dangers of a PKI becoming a SurveillanceI.
Roger Clarke's 'PKI as Mis-Fit': Some thoughts on why PKI isn't nearly the panacea some have claimed it is.
SACA Home Page: South African CA.
S.E.E. - Home page: PKI design based on doing what you can with what you've got.
SEIS: Secure Electronic Information in Society (SEIS) project in Sweden.
SI-CA: Slovenian CA.
Signet ID Home Page: Australian CA.
Singapore Controller of Certification Authorities: Singapore digital signature and CA legislation.
SIRCA: Securities Industry Association CA.
SISCER: Spanish CA.
SoftForum Certifying Center: Korean CA (all text is in Korean).
SPKI Certificate Documentation: Documentation and links for SPKI certs.
SPKI Requirements: Simple public-key infrastructure requirements.
SSH Communications Security ISAKMP test page / Certificate request processing: SSH test CA (issues certs in response to PKCS #10 requests).
SSLeay Certificate Cookbook: Cookbook for setting up a simple CA and working with server and client certs.
SSLeay PKCS#12 patch FAQ: Guide to hacking things so Netscape and MSIE will recognise certs generated by other software.
Structured Arts: X.509-related services.
Structuring X.509 Certificates for Use with Microsoft Products: MS's idea of how to set up X.509 certs. Note: Page needs Java enabled or it won't work.
Summary of Digital Signature and Electronic Signature Legislation: McBride Baker & Coles very comprehensive summary of worldwide digital signature legislation.
Swisskey AG: Swiss CA.
T7 - ISIS: ISIS digital signature working group.
TC TrustCenter Certification Authority and Security Provider: German CA.
Telecom Italia Certification Authority: Italian CA (in Italian).
Telekom Trust Center: German Telekom CA.
Ten Risks of PKI: What You're Not Being Told About Public: Cautionary note to the PKI hype.
Testing PKI Components: NIST X.509 path validation test suite.
Thawte Digital Certificate Services: South African CA.
The e-commerce debate in South Africa: Discussion forum on e-commerce issues from a South African perspective.
The emperor�..s new clothes: the truth about digital signatures and Internet commerce: Are digital signatures really the next big thing? An analysis by a law professor.
The Insecurity of the Digital Signature: A lawyer's comments on problems with digital signatures.
Time-Stamping: Links to information on timestamping research, protocols, papers, and patents.
TORSEC - public site - Time Stamp reference page: Resources related to the timestamping protocol (TSP)
tpki: Trivial Public Key Infrastructure.
TradeAuthority: General CA.
UK Academic PCA: UK CA.
UNI-C PCA: Danish CA.
UNINETT Certification Authority - UNISA: Norwegian CA.
United Nations - Electronic Signatures: UN draft articles on electronic signatures.
VeriSign, Inc.: Major worldwide CA.
Verisign CRL's: Verisign's CRL repository.
Verisign Repository: Information on digital ID's and certificates, certificate practices, and FAQ's.
Verzeichnisdienst der Zertifizierungsstelle [...] für Telekommunikation und Post: RegTP certificate directory.
VRK/PRC: Fineid specifications-HST määritykset: Finnish PKI profile (in Finnish)
Weaving a Web of Trust: Trust management on the WWW.
WebVision Developers Corner: CA toolkit and guide ("low-budget CA").
Wild ID - Totally Free Digital ID: Like Verisign but free.
World Wide Wedlin CA: Swedish CA.
X.500 Directory Standard: Links to X.500-related information, standards, and references.
X.500 Registration Authorities: The number of these has doubled recently... a second one has been discovered in Petropavlovsk-Kamchatsky.
X.509 Sample Certificates: Various sample certificates including oddball fields and types.
X9F Taxonomy and Glossary - Lynn Wheeler: Definitions of crypto, PKI and financial services-related terms.