I know TLS normally uses a x.509 certificate. But is it possible to use a non-x.509 cert to do TLS if both the server and client understand the format of that certificates?

1 Answer 1


Yes, you can.

The server_certificate_type and client_certificate_type extensions may be used to negotiate the usage of alternative certificate types. See the TLS Certificate Type registry for possible values. Values in the range 224-255 are reserved for private use as per RFC7250.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .