RFC 2528:Internet X.509 Public Key Infrastructure ...
RFC-Ref

1. Executive Summary

   This specification contains guidance on the use of the Internet
   Public Key Infrastructure certificates to convey Key Exchange
   Algorithm (KEA) keys. This specification is an addendum to RFC 2459(-> 3280prop),
   "Internet X.509 Public Key Infrastructure: Certificate and CRL
   Profile".  Implementations of this specification must also conform to
   RFC 2459(-> 3280prop).  Implementations of this specification are not required to
   conform to other parts from that series.

Google
Web
RFC-Ref