# Standards and References - Certificate Authority with OpenSSL

## Primary Standards

### RFC 5280 - Internet X.509 PKI Certificate and CRL Profile
- **URL**: https://www.rfc-editor.org/rfc/rfc5280
- **Description**: Core X.509v3 certificate and CRL format specification

### RFC 6960 - X.509 OCSP
- **URL**: https://www.rfc-editor.org/rfc/rfc6960
- **Description**: Online Certificate Status Protocol

### RFC 3647 - Internet X.509 PKI Certificate Policy and Certification Practices Framework
- **URL**: https://www.rfc-editor.org/rfc/rfc3647
- **Description**: Framework for CP and CPS documents

### NIST SP 800-57 Part 1 Rev. 5
- **URL**: https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final
- **Description**: Key management recommendations

### CA/Browser Forum Baseline Requirements
- **URL**: https://cabforum.org/baseline-requirements/
- **Description**: Requirements for publicly trusted CAs

## Tools

### OpenSSL
- **URL**: https://www.openssl.org/
- **Docs**: https://www.openssl.org/docs/man3.0/man1/

### Python cryptography library
- **URL**: https://cryptography.io/en/latest/x509/
- **Description**: X.509 certificate generation and parsing
