[1] ITU-T. Recommendation X.509: Information technology -open systems interconnection - the directory: authentication framework
[S].2005:08/05.

[2] Cooper D, Santesson S, Farrell S W, et al. Internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile
[S]. RFC5280.2008-05.

[3] Myers M, Ankney A, Malpani A, et al. X.509 internet public ley onfrastructure online certificate status protocol
[S]. RFC 2560. 1999-06.

[4] Chokhani S, Ford W, Sabett R. Internet X.509 public key infrastructure certificate policy and certification practices framework. RFC3647. 2003:11.

[5] 公钥密码系列标准 . http://www.rsa.com/rsalabs/node.asp?id=2124.

[6] Steven L. PKI interoperability framework . . http :// www.pkiforum.org/pdfs/PKIInteroperabilityFramework.pdf.

[7] Burr W, Dodson, Nazario N, et al. Minimum interoperability specification for PKI components, Version 1
[S]. NIST Special Publication, 1998.

[8] 冯登国,吴志刚,荆继武.PKI组件最小互操作规范
[S].国家标准GB/T 19771-2005.

[9] 电子认证服务许可证 . . http://www.miit.gov.cn/ n11293472/n11294912/n11296542/12126363.html.

[10] 国家信任源根CA中心 . . http://www.rootca.gov.cn/

[11] Microsoft root certificate program . . http://www.microsoft.com/

[12] WebTrust . . http://webtrust.net/

[13] Federal bridge CA . . http://www.cio.gov/fbca/

[14] European bridge-CA . . http://www.bridge-ca.org/

[15] Institute of Electrical and Electronics Engineers. IEEE standard computer dictionary: A compilation of IEEE standard computer glossaries
[M]. New York:NY,1990.

[16] Common criteria . . http://standards.iso.org/ittf/PubliclyAvailableStandards/c040612_ISO_IEC_15408-1_2005(E).zip.

[17] Polk W, Housley R, Bassham L. Algorithms and identifiers for the internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile
[S].RFC3279. 2002.