This document defines an X.509v3 certificate extension. It binds a list of security information to the subject of a certificate, which may be used to cognize the security posture of the subject.