Introduction

Overview

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

• Architecture

• Certificate

• Certificate Profiles

• Certificate Revocation List

• Roles and Privileges

• Authentication

• Key Recovery

• HSM

• Smartcard Lifecycle Management

Services

• Certificate Authority

• Key Recovery Authority

• OCSP Manager

• Token Key Service

• Token Processing System

• ACME Responder

Obsolete Features

• Registration Authority

• Auto Enrollment Proxy

RFCs

• RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP

• RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

• RFC 4211: Internet X.509 Certificate Request Message Format (CRMF)

• RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

• RFC 6962: Certificate Transparency

• RFC 7292: PKCS #12: Personal Information Exchange Syntax v1.1

• RFC 8555: Automatic Certificate Management Environment (ACME)

See Also

• Public Key Infrastructure with Dogtag