I wonder what the differences are between this and X.509 / LDAP.
Those who do not study the RFCs are doomed to reimplement them.