X509-PKI-DETAIL

ITU-T standard digital certificates.

Definition

X.509 v3 includes: Subject DN, Issuer DN, Validity (notBefore/notAfter), Subject Public Key Info, Extensions (Subject Alt Name, Key Usage, Extended Key Usage, CRL/OCSP URLs). DER or PEM encoding. Algorithms: RSA 2048/4096, ECDSA P-256/P-384, Ed25519 (RFC 8410).

Origin

X.509 v1 published by CCITT 1988 ; v3 (with extensions) in 1996 ; revisions RFC 3280 (2002), 5280 (2008).

Example in context

An AS2 partner issues an X.509 ECDSA P-256 certificate with SAN as2.partner.com — Drummond certified for interop.

Related terms

• X.509 PKI — parent concept.