1) Provide a listing of the fields associated with a certificate of your choosin
ID: 3800559 • Letter: 1
Question
1) Provide a listing of the fields associated with a certificate of your choosing. Use the X509 definition to match the general fields of a certificate with the certificate you choose to look at. Describe each field.
2) Your manager is considering implementing a PKI infrastructure. They are considering using RSA encryption technology for the central part of their infrastructure. You manager would like to know some products or services that utilize RSA encryption technology. Provide three examples and explain how they make use of the RSA encryption technology. Provide a few original sentences describing each of your examples.
Explanation / Answer
x.509 certificate is based on the use of public-key cryptography and digital signatures. The heart of the X.509 scheme is the public-key certificate associated with each user. the different fields of the certificate are given as :
1.version: default version is 1 if the issue unique identifier or subject unique identifier are preesent the value must be 2,if one or more extensions are present ,the version must be 3.
2.serial number: it is the unique integer value that is unambigiously associated with the certificate.
3.Signature algorithm identifier: The algorithm used to sign the certificate together with associated parametres .
4.Issuer name: X.500 name of the CA that created and signed the certificate.
5.Period of validity: it consists of two dates the first and the last date on which the certificate is valid.
6.Subject name: The name of the user to whom the certificate refers.that is this certificate certifies the public key of the subjects who holds the corresponding private key.
7.Subject's public key information: The public key of the subjeect ,plus an identifier of the algorithm for which key is to be used, together with an assocaited parametres.
8.Issuer unique identifier: An optional bit string field used to identify uniquely the issueing CA in the event the X.500 name has been reused for different entities.
9.Subject unique identifier: An optional-bit string field usewd to identify uniquely the subject in the event the X.500 name has been reused for different entities.
10.Extensions: A set of one or more extenison fields .
11. Signature: Covers all of the other fields of the certificate ; it contains the hash code of the other fields encrypted with CA's private key.
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.