Skip to main content
2 of 2
replaced http://tools.ietf.org/html/rfc with https://www.rfc-editor.org/rfc/rfc

Why is the issuer name field signed in X.509?

In the X.509 specification it sais that the issuer name is to be signed.

Since we verify the certificate with the authenticated issuer's public key, it seems infeasible to forge the issuer name anyways. A different issuer name would lead us to choose a different entities public key which would never match the signature.

Could somebody please shed some light on this for me?

Karl Hardr
  • 692
  • 5
  • 13