Under RFC 9060 each delegate certificate's TNAuthList scope must equal or be a subset of its parent certificate's scope.
Checked 2026-10-02
- Vendor
- not restricted
- Product
- not restricted
- Subsystem
- STIR certificate delegation
- Deployment
- carrier
- Region
- not restricted
- Release range
- RFC 9060
- Checked
- 2026-10-02
Sources
- RFC 9060: Secure Telephone Identity Revisited (STIR) Certificate Delegation — IETF / RFC Editor · tier 1 standards and regulators · RFC 9060 section 4
Cite this note
APA
WarmTransfer. (2026, October 2). Troubleshooting STIR/SHAKEN attestation levels on outbound calls: source note stir-shaken-attestation-troubleshooting-rfc9060-scope-subset. WarmTransfer. https://warmtransfer.net/knowledge/claims/stir-shaken-attestation-troubleshooting-rfc9060-scope-subset
BibTeX
@misc{warmtransfer-claim-stir-shaken-attestation-troubleshooting-rfc9060-scope-subset,
title = {Troubleshooting STIR/SHAKEN attestation levels on outbound calls: source note stir-shaken-attestation-troubleshooting-rfc9060-scope-subset},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/stir-shaken-attestation-troubleshooting-rfc9060-scope-subset},
note = {Source note stir-shaken-attestation-troubleshooting-rfc9060-scope-subset, checked 2026-10-02}
}