210-250 · Question #36
Which cryptographic key is contained in an X.509 certificate?
The correct answer is B. public. An X.509 digital certificate is designed to bind an identity to a public key, and only the public key is embedded in the certificate structure.
Question
Which cryptographic key is contained in an X.509 certificate?
Options
- Asymmetric
- Bpublic
- Cprivate
- Dasymmetric
How the community answered
(16 responses)- A6% (1)
- B88% (14)
- D6% (1)
Why each option
An X.509 digital certificate is designed to bind an identity to a public key, and only the public key is embedded in the certificate structure.
Symmetric keys are shared secret keys used in algorithms like AES and are never embedded in X.509 certificates, which are specifically designed for public-key infrastructure.
As defined in RFC 5280, an X.509 certificate contains the subject's public key in the SubjectPublicKeyInfo field, which is signed by a trusted Certificate Authority to bind the key to the subject's identity. This public key can then be used by others to encrypt data for the subject or to verify the subject's digital signatures. The corresponding private key is never included in the certificate and must remain exclusively under the subject's control.
The private key must remain secret and is never distributed via an X.509 certificate - including it would completely compromise the security model of PKI.
Asymmetric describes a category of cryptographic system, not a specific key type - X.509 certificates specifically carry only the public half of an asymmetric key pair.
Concept tested: X.509 certificate public key contents
Source: https://datatracker.ietf.org/doc/html/rfc5280
Topics
Community Discussion
No community discussion yet for this question.