NSE4_FGT-7.0 · Question #1
Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?
The correct answer is A. Subject Key Identifiervalue. FortiGate uses the Subject Key Identifier (SKI) in a certificate to identify the public key of the certificate's subject and establish trust relationships with the Authority Key Identifier (AKI) of the issuing certificate.
Question
Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?
Options
- ASubject Key Identifiervalue
- BSMMIE Capabilitiesvalue
- CSubjectvalue
- DSubject Alternative Namevalue
How the community answered
(22 responses)- A91% (20)
- C5% (1)
- D5% (1)
Why each option
FortiGate uses the Subject Key Identifier (SKI) in a certificate to identify the public key of the certificate's subject and establish trust relationships with the Authority Key Identifier (AKI) of the issuing certificate.
The Subject Key Identifier (SKI) in a certificate uniquely identifies the public key contained within that certificate. This value helps FortiGate determine the cryptographic relationship between an issued certificate and its issuer's public key, which is identified by the Authority Key Identifier (AKI) in the issuer's certificate, thus forming a certificate chain.
SMMIE Capabilities relate to secure email and do not define the hierarchical relationship between a certificate and its issuer.
The Subject value identifies the entity the certificate is issued to, not the cryptographic relationship with the issuer.
The Subject Alternative Name (SAN) value specifies additional hostnames or IP addresses for which the certificate is valid, not the relationship with the certificate issuer.
Concept tested: X.509 Certificate Subject Key Identifier
Source: https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.3
Topics
Community Discussion
No community discussion yet for this question.