Introduction of PKI Certificate

PKI Certificate Tutorials - Herong's Tutorial Examples

∟Introduction of PKI Certificate

This chapter provides a quick introduction of PKI certificate. Topics certificate structure and data fields; examples root CA, intermediate CA and end entity certificates; OID (Object IDentifiers) used in certificates.

What Is PKI Certificate

Usage Types of PKI Certificates

Certificate Data Fields and X.509 Standard

Root CA Certificate Example

Intermedate CA Certificate Example

End Entity Certificate Example

OIDs Used in PKI Certificate

Takeaways:

PKI certificate is a digitally signed document that certifies the identity of a given entity.
PKI certificate contains a set of data fields and a digital signature.
Certificate data fields include subject (entity to be certified), issuer, and subject's public key.
Root CA certificate is a self-signed certificate identifies a root certificate authority.
Intermidate CA certificate is signed by a higher certificate authority.
End entity certificate is signed by a certificate authority and used to certify end organizations, users, systems and other entities.

Table of Contents

About This Book

Introduction of PKI (Public Key Infrastructure)

►Introduction of PKI Certificate

PKI Certificate File Formats

OpenSSL - Cryptography Toolkit

"openssl ca" - CA (Certificate Authority) Tool

Java "keytool" Commands and KeyStore Files

PKI Certificate Store

PKCS12 Certificate Bundle File

PKCS7 Certificate Chain File

Linux Trust Store for CA Certificates

ca-certificates - Linux CA Certificate Package

update-ca-trust Command on Red Hat Computers

PKI Certificate Related Terminology

References

Full Version in PDF/EPUB