Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.0) GUI 2-5
Advanced
Certificates
X.509 Certificate Format
The Adit 3000 and Adit MSR support X.509 certificates that comply with the ITU-T X.509
international standard. An X.509 certificate is a collection of a standard set of fields containing
information about a user or device and their corresponding public key. The X.509 standard defines what
information goes into the certificate, and describes how to encode it (the data format). All X.509
certificates have the following data:
Certificate holder’s public key - the public key of the certificate holder, together with an
algorithm identifier that specifies which cryptosystem the key belongs to and any associated
key parameters.
Serial number of the certificate - the entity that created the certificate is responsible for
assigning it a unique serial number to distinguish it from other certificates it issues.
Certificate holder’s unique identifier - this name is intended to be unique across the Internet
and consists of multiple subsections.
Certificate’s validity period - the certificate’s start date/time and expiration date/time,
indicates when the certificate will expire.
Unique name of the certificate issuer - the unique name of the entity that signed the
certificate. This is normally a CA. Using the certificate implies trusting the entity that signed
this certificate.
Digital signature of the issuer - the signature using the private key of the entity that issued the
certificate.
Signature algorithm identifier - identifies the algorithm used by the CA to sign the certificate.