SSCP · Question #584
What attribute is included in a X.509-certificate?
The correct answer is A. Distinguished name of the subject. An X.509 certificate always includes the Distinguished Name (DN) of the subject, which uniquely identifies the entity to which the certificate is issued.
Question
What attribute is included in a X.509-certificate?
Options
- ADistinguished name of the subject
- BTelephone number of the department
- Csecret key of the issuing CA
- Dthe key pair of the certificate holder
How the community answered
(27 responses)- A93% (25)
- B4% (1)
- C4% (1)
Why each option
An X.509 certificate always includes the Distinguished Name (DN) of the subject, which uniquely identifies the entity to which the certificate is issued.
An X.509 certificate contains the Distinguished Name (DN) of the subject (the entity to which the public key belongs), which serves as a unique identifier for that entity within the certificate. Other critical attributes include the public key, serial number, validity period, and the issuer's DN.
While a telephone number might appear in some certificate extensions or subject alternative names, it is not a universally required or core attribute of the base X.509 certificate structure like the subject's DN.
The secret key (private key) of the issuing Certificate Authority (CA) is used by the CA to sign the certificate, but it is never included in the issued certificate itself; keeping it secret is paramount to PKI security.
An X.509 certificate contains only the public key of the certificate holder, not the entire key pair (public and private key). The private key must remain confidential to the certificate holder.
Concept tested: X.509 certificate components
Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/x-509-public-key-certificates
Topics
Community Discussion
No community discussion yet for this question.