nerdexam
(ISC)2

SSCP · Question #584

What attribute is included in a X.509-certificate?

The correct answer is A. Distinguished name of the subject. An X.509 certificate always includes the Distinguished Name (DN) of the subject, which uniquely identifies the entity to which the certificate is issued.

Submitted by ravi_2018· Apr 18, 2026Cryptography

Question

What attribute is included in a X.509-certificate?

Options

  • ADistinguished name of the subject
  • BTelephone number of the department
  • Csecret key of the issuing CA
  • Dthe key pair of the certificate holder

How the community answered

(27 responses)
  • A
    93% (25)
  • B
    4% (1)
  • C
    4% (1)

Why each option

An X.509 certificate always includes the Distinguished Name (DN) of the subject, which uniquely identifies the entity to which the certificate is issued.

ADistinguished name of the subjectCorrect

An X.509 certificate contains the Distinguished Name (DN) of the subject (the entity to which the public key belongs), which serves as a unique identifier for that entity within the certificate. Other critical attributes include the public key, serial number, validity period, and the issuer's DN.

BTelephone number of the department

While a telephone number might appear in some certificate extensions or subject alternative names, it is not a universally required or core attribute of the base X.509 certificate structure like the subject's DN.

Csecret key of the issuing CA

The secret key (private key) of the issuing Certificate Authority (CA) is used by the CA to sign the certificate, but it is never included in the issued certificate itself; keeping it secret is paramount to PKI security.

Dthe key pair of the certificate holder

An X.509 certificate contains only the public key of the certificate holder, not the entire key pair (public and private key). The private key must remain confidential to the certificate holder.

Concept tested: X.509 certificate components

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/x-509-public-key-certificates

Topics

#X.509 certificate#Digital certificates#PKI#Distinguished Name (DN)

Community Discussion

No community discussion yet for this question.

Full SSCP Practice