https://app.kbone.net/vault/rfc/docid/4180
RFC3820: Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile
Network Working Group S. Tuecke Request for Comments: 3820 ANL Category: Standards Track V. Welch NCSA ...