A senior cybersecurity engineer is solving a digital certificate issue in which the CA denied certificate issuance due to failed subject identity validation. At which of the following steps within…

The correct answer is A. RA. The Registration Authority (RA) is responsible for validating the identity of the certificate requestor before the Certificate Authority (CA) issues the certificate. If the identity validation fails during this step, the RA will deny the request, leading to a failure in…

Submitted by andres_qro· Mar 6, 2026Security Engineering

Question

A senior cybersecurity engineer is solving a digital certificate issue in which the CA denied certificate issuance due to failed subject identity validation. At which of the following steps within the PKI enrollment process would the denial have occurred?

Options

ARA
BOCSP
CCA
DIdP

How the community answered

(32 responses)

A
94% (30)
C
3% (1)
D
3% (1)

Explanation

The Registration Authority (RA) is responsible for validating the identity of the certificate requestor before the Certificate Authority (CA) issues the certificate. If the identity validation fails during this step, the RA will deny the request, leading to a failure in certificate issuance. The CA will only issue the certificate after the RA has successfully validated the requestor's identity. Therefore, the denial of certificate issuance due to failed subject identity validation would have occurred at the RA stage.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice