Architectures & Technologies ...
X.509 Certificates
- Features
- Binds Public Key to an Individual
Distinguished Name
- Time Limited Validity
- Web and Email Support
Digital Signatures, Public Key Encryption
- Stored in Digital Wallet on Client
- Administered by Certificate Authority (CA)
Authenticator - Third Party Validation
Issues/Validates/Revokes Certificates
Notes:
X.509 certificates offer another level of authentication and trust that is similar to the concept of the Kerberos session ticket. Certificates have become highly integrated into the Web architecture as a basis for authenticating commerce transactions. They are also extensible to use in the electronic mail arena for digital signatures on messages and public key encryption of mail messages. Certificates are validated by a “trusted” third party known as the Certificate Authority.