Digital Certificate
- •
def
- •
a public key certificate — binds a public key with a digital signature and other details about the key holder, adding trust to that key
- •
- •
standard format
- •
X.509 — the standard certificate format
- •
- •
example fields
- •
chain of trust — which certificate authority (and root authority) issued it; see Chain of Trust
- •
serial number, version
- •
signature algorithm
- •
subject / name of the cert holder — the certificate holder's identity/organization information
- •
issuer — information about the issuing certificate authority
- •
expiration date — a Managerial Control; there's no technical reason a certificate must expire at any particular interval, an organization simply decides how long to make it valid
- •
Subject Alternative Name (SAN) — additional domain names also covered by the certificate
- •
public key algorithm — e.g., RSA or elliptic curve cryptography
- •
extensions
- •
- •
- •