A chain ends at configured trust
02Path validation starts with a trusted anchor and processes certificates toward the target.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 6.1 ↗
RFC 5280 · § 6.1EXAMPLE
3 / 3
03
Target certificate
Accept the path only if all required processing succeeds.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
The trust anchor is an input, not a self-signature that creates trust.
- The trust anchor is an input, not a self-signature that creates trust.
- Verify signatures and certificate validity along the path.
- Application identity matching is an additional concern outside basic path processing.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy