DFN-PKI CP of DFN-PKI V6 - Security Level “Global” - 3 April 2020

Aug 30, 2026

Upload by Putri

Certification Policy document defining requirements and responsibilities for DFN-PKI certificates, focusing on security level “Global” under DFN-Verein. It covers policy administration, roles of PKI participants, definitions and acronyms, publication and repository duties, repository access controls, and identification and authentication processes. The policy specifies certificate life-cycle operational procedures including application handling, issuance, acceptance, renewal, re-key, modification, revocation and suspension, status services, end-of-subscription, and key escrow/recovery. It also outlines physical and procedural controls, personnel controls, audit logging, and record archival practices.

LanguageEnglish

CategoryResearch & Report

FormatPDF

Pages31

Reading Time1 h 18 min

AccessFree to download

1 Introduction

1.1 Overview

1.2 Document Name and Identification

1.3 PKI Participants

1.4 Certificate Usage

1.5 Policy Administration

1.6 Definitions and Acronyms

2 Publication and Repository Responsibilities

2.1 Repositories

2.2 Publication of Certification Information

2.3 Time or Frequency of Publication

2.4 Access Controls on Repositories

3 Identification and Authentication

3.1 Naming

3.2 Initial Identity Validation

3.3 Identification and Authentication for Re-Key Requests

3.4 Identification and Authentication for Revocation Requests

4 Certificate Live-Cycle Operational Requirements

4.1 Certificate application

4.2 Certificate Application Processing

4.3 Certificate issuance

4.4 Certificate Acceptance

4.5 Key Pair and Certificate Usage

4.6 Certificate Renewal

4.7 Certificate Re-Key

4.8 Certificate Modification

4.9 Certificate Revocation and Suspension

4.10 Certificate Status Services

4.11 End of Subscription

4.12 Key Escrow and Recovery

5 Physical Controls

5.1 Site Location and Construction

5.2 Procedural Controls

5.3 Personnel Controls

5.4 Audit Logging Procedures

5.5 Records Archival

Certification Policy of the DFN-PKI – Security Level “Global” – DFN-Verein CP of DFN-PKIV6 3 April 2020 non-authoritative English translation This document is a non-authoritative translation of the corresponding document in German language. In case of deviations, the document in German language takes precedence. This document and all parts of it are copyright protected. The distribution without alterations (in copy) is expressly permitted. Contact: [pki@dfn.de](pki@dfn.de)[ ](pki@dfn.de)© DFN Verein Contents 1 Introduction .............................................................................................................................................. 6 1.1 Overview ................................................................................................................................................ 6 1.2 Document Name and Identification ....................................................................................................... 6 1.3 PKI Participants....................................................................................................................................... 6 1.4 Certificate Usage .................................................................................................................................... 7 1.5 Policy Administration ............................................................................................................................. 7 1.6 Definitions and Acronyms ...................................................................................................................... 7 2 Publication and Repository Responsibilities .............................................................................................. 8 2.1 Repositories ............................................................................................................................................ 8 2.2 Publication of Certification Information ................................................................................................. 8 2.3 Time or Frequency of Publication .......................................................................................................... 8 2.4 Access Controls on Repositories............................................................................................................. 8 3 Identification and Authentication ............................................................................................................. 8 3.1 Naming ................................................................................................................................................... 8 3.2 Initial Identity Validation ...................................................................................................................... 10 3.3 Identification and Authentication for Re-Key Requests ....................................................................... 13 3.4 Identification and Authentication for Revocation Requests ................................................................ 13 4 Certificate Live-Cycle Operational Requirements .................................................................................... 13 4.1 Certificate application .......................................................................................................................... 13 4.2 Certificate Application Processing ........................................................................................................ 14 4.3 Certificate issuance .............................................................................................................................. 14 4.4 Certificate Acceptance ......................................................................................................................... 14 4.5 Key Pair and Certificate Usage ..............................................................................................

FAQs

What security level and version does this certification policy apply to?

It applies to DFN-PKI V6 under the Security Level “Global” for DFN-PKI operated by DFN-Verein.

How does the policy address publication and repository responsibilities?

It defines repositories, publication of certification information, publication frequency, and access controls governing repositories.

What certificate life-cycle processes are specified?

The policy covers certificate application, processing, issuance, acceptance, key pair usage, renewal, re-key, modification, revocation and suspension, status services, end of subscription, and key escrow and recovery.

Aug 30, 2026

Upload by Putri