nerdexam
Cisco

210-250 · Question #193

Which five of the following options are components of the X.509 v3 certificate standard? (Choose five.)

The correct answer is A. serial number C. issuer D. validity date range E. subject F. subject public key info. X.509 v3 certificates define five core fields: serial number, issuer, validity period, subject, and subject public key info. User name and department name are not standalone certificate fields in the standard.

Security Technologies

Question

Which five of the following options are components of the X.509 v3 certificate standard? (Choose five.)

Options

  • Aserial number
  • Buser name
  • Cissuer
  • Dvalidity date range
  • Esubject
  • Fsubject public key info
  • Gdepartment name

How the community answered

(22 responses)
  • A
    95% (21)
  • G
    5% (1)

Why each option

X.509 v3 certificates define five core fields: serial number, issuer, validity period, subject, and subject public key info. User name and department name are not standalone certificate fields in the standard.

Aserial numberCorrect

Serial number is a mandatory X.509 v3 field that uniquely identifies each certificate within the issuing CA's scope.

Buser name

User name is not a defined standalone field in the X.509 v3 structure - identity information is encoded within the Subject distinguished name using standardized attributes such as Common Name (CN).

CissuerCorrect

Issuer is a mandatory X.509 v3 field that identifies the CA which signed and issued the certificate, forming part of the chain of trust.

Dvalidity date rangeCorrect

Validity date range - composed of notBefore and notAfter subfields - is a mandatory X.509 v3 field that defines the window during which the certificate is considered valid.

EsubjectCorrect

Subject is a mandatory X.509 v3 field that identifies the entity (person, device, or service) to which the certificate is issued.

Fsubject public key infoCorrect

Subject public key info is a mandatory X.509 v3 field that contains the entity's public key and specifies the algorithm used with it.

Gdepartment name

Department name is not a standalone certificate field - organizational unit information may appear as an OU attribute inside the Subject DN but is not a separately defined top-level certificate component.

Concept tested: X.509 v3 certificate mandatory field structure

Source: https://www.rfc-editor.org/rfc/rfc5280

Topics

#X.509 v3#certificate components#PKI#digital certificates

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice