name: CTL
full_form: Certificate Trust List
context: A Certificate Trust List (CTL) is a signed PKCS#7 data structure that can contain a list of trusted CAs. A trusted CA is identified within the CTL by a hash of the public key certificate of the subject CA. The CTL also contains policy identifiers and supports the use of extensions. From an inter-domain interoperability perspective, the CTL essentially replaces the cross-certification. The key is that the relying party trusts the issuer of the CTL, which then allows the relying party to trust the CAs conveyed within the CTL [1]. CTL is more like the legacy web browser trust model and it is not considered a real alternative here, but presented as it has been quite largely used. An example, where a root CA of an operator A provides a CTL indicating unilateral trust to operators B and C is shown in figure 9. Figure 9: CTL model
description: A Certificate Trust List (CTL) is a signed data structure containing a list of trusted Certificate Authorities (CAs). It ensures the authenticity and integrity of digital certificates used in telecommunications networks, facilitating secure communication and interoperability.
explanation: CTL directly contributes to network security by establishing trust in CAs responsible for issuing certificates. This aligns it with the category of Security Mechanisms.
section_title: 4.2.1.3	CTL model
biotag_Context: O,B-Procedure,I-Procedure,I-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Technology,O,O,O,O,B-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Procedure,O,B-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Technology,O,O,O,O,O,O,B-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Procedure,O
biotag_Description: O,B-Procedure,I-Procedure,I-Procedure,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O