When you look at currently used concept of Root CA (primarily in SSL/TLS context), you can see SPoF vulnerability, which means, if your private key is disclosed, you automatically lose whole chain. ...
I used openssl to create a X.509 certificate but I don't quite understand the relationship between a X.509 and a SSL certificate. Are they the same? Is a SSL certificate just a X.509 certificate that ...
In some Microsoft articles like http://technet.microsoft.com/en-us/library/cc731792%28v=ws.10%29.aspx, I find some confusing statements like Application policies are sometimes called extended key ...
Analogously to the SSL server certificate question, which extensions should I use for S/MIME, and should the CA be restricted somehow as well? (I'm using openssl, which at the moment creates CA and ...
I have some question about the X.509 v3 extensions. What extensions should appear in a proper certificate for a SSL server ?