PKI concepts Flashcards
What is the certificate Authority?
It is the computer giving out the certificate
What is the hierarchy of CA’s (certificate authorities)?
The root CA gives out the CA’s to the intermediate authorities and they give them out to the users. The root CA’s are then taken offline completely
What are the two kinds of CA’s
There are internal PKI’s which are done within companies and then External PKI which are for public facing and are backed with high dollar
What is a common name for a CA?
Also known as the Fully Qualified Domain Name (FQDN), is the characteristic value within a Distinguished Name (DN). Typically, it is composed of Host Domain Name and looks like, “www.digicert.com” or “digicert.com”. The Common Name field is often misinterpreted and is filled out incorrectly
What is a self sign certificate?
Is when you sign your own certificate locally, and issues it to the intermediate.
What is the Certificate chain validation ?
Where the users computer looks at the root and subordinate CA validates their certificates
Are cerfiticates suspectible to password attacks?
no they are not
User certificates can be used for?
They can be use for email, disk encryption, and authentication
What does code signing certificate mean
It provides identity of vendor, and ensures integrity of software, and operating systems use this to vaildate.
What are wild card certificate?
Its used to identify the parent domain and verifies all the sub domains and represented by an asterisk
What are the levels of validation certificate?
Domain validation: lowest level of validation and verifies the ownership over domain. organizztion validation: greater than the DV and verifies the identity of orgainzation. Extended validation: highest form of the organization identification, most rigourous vaildation process.
What is .der certifcate format
It’s binary encoded and does not include private key (.cer)
what is PEM certificate format?
It’s base64 ASCII encoded and has various extensions (.perm,.cer, crt)
What is PKCS#7 certificate format?
It includes the public key, and certificate information, and certificate chain (.PB7B)
What is PKCS#12 certificate format?
It includes both private/public keys, certificate information(inlcudes extended properties) and certificate chain
