Certificates

Certificates

1. Standard formats for public key certificates

   • PKCS #6
   • X.509 ver. 3
     • Support extensions of information contained inside the certificate
       • Public extensions
         • Key and policy informations
         • Subject and issuer attributes
         • certification path constraints
         • CRL distribution points
       • Private extensions
       • Critical
         • If the relying party is not capable of understanding a given extension, the certificate must be rejected.
       • Non critical
         • If the relying party is not capable to understand a given extension the certificate can be used anyway, discarding that information.
     • Provides also a standard format for CRL
       • X.509 CRL ver 2
         • CRL-specific extensions
         • Entry-specific extensions
   • PGP
   • SPKI