| Term |
Descriptions |
|
AIA URL
|
AIA stands for "Authority Information Access," and within the framework of a
Certificate Authority (CA), the AIA URL (Authority Information Access URL) denotes
the specific location where supplementary details about the CA and its certificates
can be accessed. Defined in the X.509 certificate standard, the AIA extension is
incorporated into digital certificates issued by CAs. The AIA URL is a critical
component of the certificate validation process, as it enables clients (such as web
browsers, applications, or other CAs) to retrieve essential information necessary
for verifying the authenticity and reliability of a certificate.
|
|
CRL URL
|
The CRL URL (Certificate Revocation List URL) indicates the location where the
Certificate Revocation List is published, and accessible to clients and
applications. The CRL comprises digital certificates that have been revoked before
their expiration dates, indicating they should no longer be trusted due to reasons
like compromise or expiration. Included in the digital certificates issued by the
CA, the CRL URL permits clients to periodically check for updates to the CRL,
ensuring they acquire the most recent list of revoked certificates.
|
|
End Entity Profile
|
An End Entity Profile (EEP) constitutes a setup that outlines the certificate-related
attributes and constraints for a particular type of end entity or certificate
requester. The term "end entity" pertains to the entity such as users, devices, or
services for which the CA provides a digital certificate. The EEP functions as a
framework of regulations and guidelines used by the CA during the creation and
issuance of certificates for end entities. It enables the CA to enforce precise
security protocols, oversee certificate properties, and regulate the scope and
application of the certificates issued to distinct entity types.
|
|
Escrowed End Entity Profile (EEP)
|
An Escrowed End Entity Profile (EEP) is a specific setup implemented in certain
Certificate Authority (CA) systems, notably in specific government or regulated
contexts. Its purpose is to tackle the issue of key recovery or escrow should a
user's private key become lost, compromised, or inaccessible, while still
maintaining security and control over critical cryptographic assets.
|
|
Fully Qualified DN
|
Fully Qualified DN stands for Fully Qualified Distinguished Name. In the context of
computer security and identity management, especially within the realm of public key
infrastructure (PKI) and X.509 digital certificates, a Fully Qualified DN refers to
the complete and precise identification of an entity within a hierarchical naming
structure. A Distinguished Name (DN) is a unique identifier for an entity, typically
composed of various attributes such as common name (CN), organization (O),
organizational unit (OU), locality (L), state (ST), and country (C). For example, a
DN might look like this: CN=John Doe, OU=IT Department, O=Company XYZ, L=City,
ST=State, C=Country
|
|
Mobile End Entity Profile
|
A Mobile End Entity Profile (EEP) is a specialized setup employed in certain
Certificate Authority (CA) systems to accommodate the distinctive needs of mobile
devices such as smartphones and tablets, within a Public Key Infrastructure (PKI)
framework. Tailored to meet the challenges and nuances inherent to mobile platforms,
the Mobile EEP ensures secure certificate management and authentication on these
devices.
|
|
OCSP URL
|
An OCSP URL (Online Certificate Status Protocol URL) refers to the specific location
where the CA's Online Certificate Status Protocol (OCSP) responder is available.
OCSP serves as an alternative to Certificate Revocation Lists (CRLs) for promptly
verifying the revocation status of digital certificates in real-time.
|
|
SSL Client Certificate
|
An SSL client certificate is a digital certificate issued by a Certificate Authority
(CA) to authenticate a client (such as a user or device) to a server during SSL/TLS
(Secure Sockets Layer/Transport Layer Security) communication. While SSL server
certificates authenticate servers to clients, SSL client certificates authenticate
clients to servers.
|
|
SSL Server Certificate
|
An SSL (Secure Sockets Layer) certificate is a type of digital certificate issued by
a Certificate Authority (CA) that verifies the identity of a website and enables
secure communication over the internet. When a user visits a website with an SSL
certificate installed, their browser establishes a secure connection with the
website's server, encrypting data exchanged between them.
|
|
Web Service Root URL
|
The Web Service Root URL denotes the base URL or endpoint where the CA's web services
are hosted and accessible to clients and other systems. These web services offered
by the CA typically offer a range of functionalities of certificate management,
including issuance, revocation, renewal, and status checks.
|