DataTerminology.comNEW
Core X.509 certificate fields and extensions, including subject, issuer, serial number, validity, and extension attributes defining purpose and constraints.
DESCRIPTION
Digital certificate terminology covers the standard fields and extensions that define identity, key material, and constraints in X.509. Key fields include subject and issuer distinguished names, serial number, validity period, and the subject’s public key. Extensions such as subject alternative name, key usage, extended key usage, and basic constraints specify identities and permitted actions. Understanding terminology enables correct certificate requests, validation, and troubleshooting. RFC 5280 profiles these elements for interoperable Internet use. Accurate terminology use reduces misconfiguration and compliance issues.
ALTERNATIVE DEFINITIONS
IETF RFC 5280
This section presents a profile for X.509 v3 certificates and X.509 v2 CRLs for use in the Internet.
Defines how certificate fields and extensions are profiled for Internet interoperability.
Microsoft Learn
X.509 certificates contain fields such as subject, issuer, serial number, validity period, a public key, and extensions that define their usage.
Summarizes the key fields and the role of extensions succinctly.
RELATED TERMS
X.509 Certificate Subject Alternative Name Key Usage Extended Key Usage Certificate Revocation List Online Certificate Status Protocol Distinguished Name Serial Number Validity Period
COMPETING TERMS
JSON Web Token Claims
RELATIONS
- Broader: Terminology
KNOWLEDGE AREAS
Data Security Infrastructure Software Engineering
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Software Developer Application Administrator IT Auditor
EXTERNAL SOURCES
- Wikipedia - X.509#Certificate structure
- IETF RFC 5280 - Certificate fields and ASN.1 structure
- OpenSSL - Tooling reference for certificate fields
TOP QUESTIONS
What is the Subject field in Digital Certificate Terminology?
The Subject identifies the entity associated with the public key, often via a Distinguished Name and additional identities in subject alternative name.
Category: Explanation
What does the Issuer field indicate in Digital Certificate Terminology?
The Issuer names the CA that signed the certificate, establishing linkages for chain validation.
Category: Explanation
Why is the Serial Number important in Digital Certificate Terminology?
It uniquely identifies a certificate issued by a CA and is used for revocation and auditing.
Category: Content
How does the Validity period function in Digital Certificate Terminology?
It defines the notBefore and notAfter times during which a certificate is considered valid, subject to revocation checks.
Category: Content
What does Key Usage specify in Digital Certificate Terminology?
It constrains operations like digitalSignature, keyEncipherment, or keyCertSign, guiding relying parties’ acceptance.
Category: Content
What is Extended Key Usage in Digital Certificate Terminology?
EKU refines intended purposes with OIDs, such as serverAuth, clientAuth, codeSigning, or emailProtection.
Category: Content
Why is Subject Alternative Name critical in Digital Certificate Terminology?
SAN lists additional identities like DNS names. Modern TLS relies on SAN for hostname validation.
Category: BestPractice
How do CRL Distribution Points and Authority Information Access relate to Digital Certificate Terminology?
They provide locations for revocation (CRL) and issuer/OCSP information (AIA), aiding validation.
Category: Operations
What common mistakes occur with Digital Certificate Terminology?
Leaving SAN empty for HTTPS, misusing key usage, or omitting EKU leads to validation failures or weak security.
Category: Mistakes