This PKIX draft defines two profiles for the use of X.509 AttributeCertificates to provide authorization support for protocols like TLS, CMS and their consumers, and others.

A brief overview of digital certificate with links to related resources, particularly its support in Microsoft products. (Microsoft)

PKIX standard that profiles the X.509 v3 certificate and X.509 v2 CRL for use on the Internet.