Certificates Flashcards
What is a machine certificate?
A certificate that gives a computer permissions to do something out of the ordinary. The main purpose for machine certificates is authentication, both client-side and server-side.
What is a user certificate?
They specify which resources a given user can have access to.
What is a code signing certificate?
A special class of digital certificate that identifies an organization. It is used to prove the identity of a vendor and ensure the integrity of the software. The OS uses them to validate the vendor.
What do email certificates use?
S/MIME
What is a wildcard certificate?
Used to identify parent domains and verify all sub (child) domains. They are represented by an asterisk.
What is a domain validation (DV) certificate?
Low-cost certificates that only require validation that a company or person can demonstrate control over a web domain for which they want to secure a certificate. Lowest level of validation.
What is an organization validation (OV) certificate?
Provides an extra level of online trust by authenticating the business identity and legitimacy. An organization must prove it owns the domain name it wishes to secure and confirm that it is a legally registered business. Greater validation than DV.
What is an extended validation (EV) certificate?
The highest form of organization identification. Requires a 16-point check to verify details such as: website domain, website owner, and the applicant’s legal, physical, and operational existence and identity. The most rigorous validation process.
What are Distinguished Encoding Rules (.der)?
A restricted variant of BER for producing unequivocal transfer syntax for data structures described by ASN. It is binary encoded and does not include a private key (.cer).
What is Privacy Enhanced Mail (PEM)?
An email security standard to provide secure electronic mail communication over the internet. it is Base54 ASCII encoded and can support various extensions.
What is Public Key Cryptography Standards #7 (PKCS#7)?
A form of electronic signature used to secure messages that can only be read by the intended recipient. Includes public key, certificate information, and certificate chain (.P7B).
What is Public Key Cryptography Standards #12 (PKCS#12)?
Includes both public and private keys, certificate information (including extended properties), and certificate chain.
