Certificate Authorities and Public-Key Infrastructures

Certificate authorities are the key components in building a public-key infrastructure.

Certificate servers are often tied into a general directory service such as LDAP or some other publicly queryable system. CAs can publish certificates for everyone to access.

A certificate authority has the following functions:

  • Issue certificates

  • Renew certificates

  • Revoke certificates and publish a certificate revocation list

Issuing Certificates

A certificate authority is designed to take information in a certain format (such as PKCS 10) and use it to generate a certificate. Policy plays an important role in this process. Each certificate authority has the right to define its own policies to use in deciding ...

Get Microsoft® Windows® 2000 Security Handbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.