NSE4_FGT-7.0 · Question #17
If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?
The correct answer is D. A root CA. A digital certificate with identical Issuer and Subject values indicates that the certificate is self-signed, which is a defining characteristic of a root Certificate Authority.
Question
If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?
Options
- AA CRL
- BA person
- CA subordinate CA
- DA root CA
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- D90% (28)
Why each option
A digital certificate with identical Issuer and Subject values indicates that the certificate is self-signed, which is a defining characteristic of a root Certificate Authority.
A Certificate Revocation List (CRL) is a list of revoked certificates and not an entity to which a digital certificate is issued.
A certificate issued to a person, or any end-entity, would have a Certificate Authority as its Issuer and the person as its Subject, making these values distinct.
A subordinate CA certificate is issued by a higher-level CA (e.g., a root CA), so its Issuer would be the higher-level CA, and its Subject would be the subordinate CA itself, resulting in different values.
A root Certificate Authority (CA) certificate is self-signed, meaning that the entity issuing the certificate (the Issuer) is the same entity to whom the certificate is issued (the Subject). This unique property allows it to anchor the trust chain in a Public Key Infrastructure.
Concept tested: Digital certificate structure- Root CA
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/adcs-overview
Topics
Community Discussion
No community discussion yet for this question.