Higher Education PKI
Technical Activities Group
(HEPKI-TAG)



Certificate Profile Maker

What is CPM? 

CPM is a CGI-program package for making a certificate profile in XML
format. It simultaneously produces a sample X.509 certificate in XML
format according to the certificate profile. 
CPM supports almost all of the standard extensions defined in RFC2459.
You can specify certificate profile without knowing the detail of the
data structures of each field defined in RFC2459.

You can edit the certificate profile and the sample X.509 certificate
in XML by hand:). Please note that CPM is a cryptography-free package,
therefore the signature verification of the sample X.509 certificate
will almost always fail.

CPM conforms to the X.509 DTD(Document Type Definition) included in
the IBM's XML Security Suite package and the CPM author defined a
certificate profile DTD based on the X.509 DTD. 
Neither of those DTDs are included in this version of the package.

In the future...

 * Certificate profile in XML format is planned to be used for
   creating a CA configuration file.


 * X.509 certificate in XML format is planned to be used as a
   programmers' reference. 
   You will be able to convert it to ASN.1 certificate with a XML <->
   ASN.1 translator such as the command in IBM's XML Security Suite
   package .

**********************************************************************
CPM was developed through Internet2 Certificate Profile format
research activities
.
**********************************************************************