ch 25 Set
0.0(0)
Studied by 0 people
View linked note
Learn
Practice Test
Spaced Repetition
Match
FlashcardsCard Sorting
1/33
There's no tags or description
Looks like no tags are added yet.
Study Analytics
Name | Mastery | Learn | Test | Matching | Spaced |
|---|
No study sessions yet.
34 Terms
1
New cards
Public Key Infrastructure (PKI)
A system that provides the necessary components for secure communication using public key cryptography.
2
New cards
Certificate Authority (CA)
A trusted entity that issues and manages digital certificates.
3
New cards
Registration Authority (RA)
An entity responsible for verifying certificate requests and forwarding them to a CA.
4
New cards
Digital Certificate
An electronic document that binds a public key to an individual or entity.
5
New cards
Certificate Revocation List (CRL)
A list of revoked certificates maintained by a CA.
6
New cards
Online Certificate Status Protocol (OCSP)
A protocol used to check the revocation status of a digital certificate.
7
New cards
Certificate Signing Request (CSR)
A request sent to a CA to obtain a digital certificate.
8
New cards
Common Name (CN)
The primary identifier in a certificate, usually a domain name or personal identifier.
9
New cards
Distinguished Name (DN)
A unique identifier for an entity in a digital certificate.
10
New cards
Subject Alternative Name (SAN)
A field in a certificate that allows multiple domain names to be covered.
11
New cards
Intermediate CA
A subordinate CA that provides a link between the root CA and end-entity certificates.
12
New cards
End-Entity Certificate
A certificate issued to an individual, organization, or device.
13
New cards
Root Certificate
A self-signed certificate that serves as the trust anchor in a PKI.
14
New cards
Wildcard Certificate
A certificate that secures a domain and all its subdomains.
15
New cards
Code-Signing Certificate
A certificate used to digitally sign software to verify its authenticity.
16
New cards
Self-Signed Certificate
A certificate signed by the same entity it certifies, often used internally.
17
New cards
Machine/Computer Certificate
A certificate issued to a computer for authentication.
18
New cards
E-mail Certificate
A certificate used for securing e-mail communications.
19
New cards
Domain Validation Certificate
A low-trust certificate verifying control over a domain.
20
New cards
Extended Validation (EV) Certificate
A high-trust certificate that provides stronger identity verification.
21
New cards
X.509
The standard format for digital certificates.
22
New cards
Distinguished Encoding Rules (DER)
A binary format for encoding certificates.
23
New cards
Privacy-Enhanced Mail (PEM)
A Base64-encoded certificate format commonly used by CAs.
24
New cards
Personal Information Exchange (PFX)
A format used to store certificates and private keys together.
25
New cards
P12 (.pfx, .p12)
A binary format for storing a certificate and private key in one file.
26
New cards
P7B (.p7b, .p7c)
A format containing certificates but no private keys, used in Windows and Java environments.
27
New cards
Stapling
A method that allows a web server to provide OCSP responses directly to clients.
28
New cards
Pinning
The practice of associating a host with a specific certificate or public key.
29
New cards
Trust Model
The structure defining trust relationships between CAs and certificates.
30
New cards
Hierarchical Trust Model
A model with a root CA at the top, issuing certificates to intermediate and end-entity CAs.
31
New cards
Peer-to-Peer Trust Model
A model where CAs cross-certify each other without a single root CA.
32
New cards
Hybrid Trust Model
A combination of hierarchical and peer-to-peer trust models.
33
New cards
Key Escrow
A process where a third party holds a copy of private encryption keys.
34
New cards
Certificate Chaining
The linking of certificates from an end-entity to a root CA to establish trust.
Flashcards (108)