312-50V10 · Question #388
Which element of Public Key Infrastructure (PKI) verifies the applicant?
The correct answer is C. Registration authority. In PKI, the Registration Authority (RA) is responsible for verifying and authenticating the identity of certificate applicants before the CA issues a certificate.
Question
Which element of Public Key Infrastructure (PKI) verifies the applicant?
Options
- ACertificate authority
- BValidation authority
- CRegistration authority
- DVerification authority
How the community answered
(26 responses)- C96% (25)
- D4% (1)
Why each option
In PKI, the Registration Authority (RA) is responsible for verifying and authenticating the identity of certificate applicants before the CA issues a certificate.
The Certificate Authority issues and manages digital certificates but relies on the RA to perform applicant identity verification.
The Validation Authority is responsible for providing certificate status information (e.g., via OCSP), not verifying applicants.
The Registration Authority acts as an intermediary between the applicant and the Certificate Authority. It performs identity verification and vetting of applicants, then vouches for them to the CA, which then issues the actual digital certificate. This separation of duties allows the CA to delegate the verification workload.
'Verification authority' is not a standard PKI component.
Concept tested: PKI Registration Authority role and function
Source: https://csrc.nist.gov/publications/detail/sp/800-32/final
Topics
Community Discussion
No community discussion yet for this question.