Category III: Foreign, Allied, or Coalition Partner PKIs or other PKIs
The Netherlands Ministerie van Defensie PKIoverheid Organisatie Persoon CA – G3 is cross-certified with the Federal Bridge via the CertiPath Bridge. However, Netherlands MOD does not currently publish their cross-certificate in a location discoverable during dynamic path building (a.k.a. “AIA chasing”). To utilize the cross-certificate path through the Federal Bridge, a system would need have the CertiPath Bridge CA – G3 > Ministerie van Defensie PKIoverheid Organisatie Persoon CA – G3 cross-certificate locally installed; this certificate can be found in the CertiPath Bridge SIA bundle at http://aia.certipath.com/IssuedBy-CertiPathBridgeCA-G3.p7c. When using this approach, a system should not install the Staat der Nederlanden Root CA – G3.
See the DoD PKI External Interoperability FAQ for more information on DoD approved partner PKI credentials.
Netherlands Ministry of Defence PKI
| Current Certification Authorities (CAs) Details | See Section 44.2 of DoD Approved External PKIs Master Document |
| Current CA Certificates | See Netherlands_Ministry_of_Defence folder in DoD Approved External PKI Certificate Trust Chains zip |
| Approved Certificate Assurance Levels* | See Section 5.18 of DoD Approved External PKIs Master Document |
| Certificate Revocation List (CRL) Distribution Points** | See Netherlands Ministry of Defence section of DoD Approved External CRL Distribution Points (CRLDPs) |
| Online Certificate Status Protocol (OCSP) Responder URL(s)** | None |
| Performs CA Rekeys? | No |
*As represented by OIDs listed in the Certificate Policies extension of the partner certificate; a certificate must assert at least one approved assurance level to be acceptable for use.
**Note: These lists are developed and maintained by DoD PKE based on CRLDP and AIA OCSP values asserted in sample certificates provided to DoD by the partner PKI for testing; they are provided for ease of reference and may not be exhaustive in all cases. Any CRL URL asserted in a CRLDP extension or OCSP URL asserted in an AIA extension of an approved certificate is approved for use by DoD relying parties.
| Title | Size | Updated | |
|---|---|---|---|
|
DoD Approved External PKI Certificate Trust Chains - Version 11.4
This zip file contains certificate trust chains for DoD Approved External PKIs.
|
— |
11 Apr 2025
|
|
|
DoD Approved External PKIs Master Document - Version 11.4
This document provides Certification Authority (CA) certificate trust chain and assurance level information for all Department of Defense (DoD) approved Public Key Infrastructures (PKIs).
|
— |
11 Apr 2025
|
|
|
DoD Approved External CRL Distribution Points (CRLDPs) - Version 1.21
|
— |
09 Dec 2024
|
|
|
DoD Approved External OCSP URLs - Version 1.19
|
— |
09 Dec 2024
|
|
|
DoD Approved External PKIs Types 5 & 6 Certificate Trust Chains (Foreign, Allied, Coalition Partner and Other PKIs) - Version 1.5
|
— |
09 Dec 2024
|
|
|
DoD Approved External PKIs Types 3 & 4 Certificate Trust Chains (Non Federal Issuers) - Version 1.18
|
— |
09 Dec 2024
|
|
|
DoD Approved External PKIs Types 1 & 2 Certificate Trust Chains (Federal Agencies) - Version 1.13
|
— |
09 Dec 2024
|