This is Bob's current understanding about security certificates:
- Security certificates are required for SSL communication.
- If you want to take part in SSL communication you have buy a certificate from a trustworthy institution.
- This institution verifies that you are the person claimed in the certificate.
- Starting a communication the certificates proves that it's really you.
Now Bob is confronted with the following problem: To grant access to some super secret data platform Alice asks Bob for some information about his security certificate.
But Bob does not know very much about security certificates. He knows where to find certificates in his browser settings. He does not know how to match the information about certificates he finds there with the requested information.
The required information is:
- CA of your Client Certificate
- Issuer Common Name
- Issuer Organisation
- Issuer Country
- Subject Common Name
- Subject E-Mail
As a normal user, can Bob find all the asked for and if so where, or should he contact his administrator?
Bonus question: Why is it even required to provide this information? Using certificates in general this does not seem to be the case