Security 7

g

Public key is

public

private key is

Known only by the owner

digital signature

verifies the sender

Digital certificate

Tech used to associate a users identity to a public key. A container for the public key

Certificate signing request

CSR

Registration authority

verifies the credentials for the signature applicant

intermediate certificate authority

CA

person requesting digital certificate can be verified by

email, documents, in person

CR?

certificate repository

CRL

Certificate revocation list

OCSP

Online certificate status protocol

stapling

web servers send queries to the responder OSCP at regular intervals to receive a time-stamped OCSP response

Google chrome

CRLset

Mozilla firefox

OneCRL

apple safari

no name

microsoft edge

CRLset

X.509

certificate

CN

Common name

PEM

Privacy enhancement mail

PFX

Personal information exchange

CER

Canonical encoding rules

DER

Distinguished encoding rules

PKI

Public key infrastructure

CPS

certificate practice statement

TLS

Transport layer security

IPsec

Internet protocol security

AH

Authentication Header

ESP

encapsulating security payload