RFC 5922: Domain Certificates in the Session Initiation Protocol (SIP)

Publisher

RFC Editor / IETF

URL

https://www.rfc-editor.org/rfc/rfc5922.html

Published

2010-06-01

Updated

unknown

Accessed

2026-09-24

HTTP status

200

License

IETF Trust Legal Provisions (BCP 78); short excerpts and locators only

Source notes citing this source

• Under RFC 5922 an implementation may examine the certificate CN field only if the certificate has no subjectAltName. in context
• RFC 5922 states that implementations must not match any form of wildcard such as a leading '*.' when checking SIP domain identities in certificates. disputed in context
• Under RFC 5922 a SIP TLS client compares the certificate identities against the original domain of the URI it passed into RFC 3263 resolution, not against the SRV target host name. in context
• Under RFC 5922, SIP domain identities come from subjectAltName URI entries with the sip scheme and no user part, and from subjectAltName DNS entries only when no SIP URI entries are present. in context
• RFC 5922, Domain Certificates in SIP (June 2010, Standards Track), updates RFC 3261. in context
• RFC 5922 forbids SIP implementations from matching any form of wildcard in a domain certificate. in context
• RFC 5922 takes a SIP domain identity from the certificate's subjectAltName, either a URI of scheme sip with no userinfo or a DNS name, and permits examining the CN only if no subjectAltName is present. in context
• A wildcard SBC certificate that Teams Direct Routing accepts under RFC 2818 rules may still be rejected by a SIP peer that validates strictly under RFC 5922, so a wildcard that works toward Microsoft is no evidence it will work on a carrier or PBX trunk. inferred in context

Cite this source record

APA

WarmTransfer. (2010, June 1). RFC 5922: Domain Certificates in the Session Initiation Protocol (SIP). WarmTransfer. https://warmtransfer.net/knowledge/sources/rfc-5922-sip-domain-certificates

BibTeX

@misc{warmtransfer-rfc-5922-sip-domain-certificates,
  title  = {RFC 5922: Domain Certificates in the Session Initiation Protocol (SIP)},
  author = {{WarmTransfer}},
  year   = {2010},
  url    = {https://warmtransfer.net/knowledge/sources/rfc-5922-sip-domain-certificates},
  note   = {RFC Editor / IETF, accessed 2026-09-24}
}