IETF RFC 5035 (2007): "Enhanced Security Services (ESS) Update: Adding CertID Algorithm Agility" Enscript Output (rfc-editor.org) (pdf)