ZyXEL Communications NWA3560-N User Manual page 172

Chapter 14 Certificates
Table 67 Configurat ion > Obj ect > Cert ificat e > Trust ed Cert ificat es > Edit ( cont inued)
LABEL
I ssuer
Signat ure Algorit hm
Valid From
Valid To
Key Algorit hm
Subj ect Alt ernat ive
Nam e
Key Usage
Basic Const raint
MD5 Fingerprint
SHA1 Fingerprint
Cert ificat e
Export Cert ificat e
OK
Cancel
172
DESCRIPTION
This field displays ident ifying inform at ion about t he cert ificat e's issuing
cert ificat ion aut horit y, such as Com m on Nam e, Organizat ional Unit ,
Organizat ion and Count ry.
Wit h self- signed cert ificat es, t his is t he sam e inform at ion as in t he Su bj e ct
N a m e field.
This field displays t he t ype of algorit hm t hat was used t o sign t he cert ificat e.
Som e cert ificat ion aut horit ies use rsa- pkcs1- sha1 ( RSA public- privat e key
encrypt ion algorit hm and t he SHA1 hash algorit hm ) . Ot her cert ificat ion
aut horit ies m ay use rsa- pkcs1- m d5 ( RSA public- privat e key encrypt ion
algorit hm and t he MD5 hash algorit hm ) .
This field displays t he dat e t hat t he cert ificat e becom es applicable. The t ext
displays in red and includes a Not Yet Valid! m essage if t he cert ificat e has not
yet becom e applicable.
This field displays t he dat e t hat t he cert ificat e expires. The t ext displays in red
and includes an Expiring! or Expired! m essage if t he cert ificat e is about t o
expire or has already expired.
This field displays t he t ype of algorit hm t hat was used t o generat e t he
cert ificat e's key pair ( t he device uses RSA encrypt ion) and t he lengt h of t he
key set in bit s ( 1024 bit s for exam ple) .
This field displays t he cert ificat e's owner's I P address ( I P) , dom ain nam e
( DNS) or e- m ail address ( EMAI L) .
This field displays for what funct ions t he cert ificat e's key can be used. For
exam ple, " Digit alSignat ure" m eans t hat t he key can be used t o sign
cert ificat es and " KeyEncipherm ent " m eans t hat t he key can be used t o encrypt
t ext .
This field displays general inform at ion about t he cert ificat e. For exam ple,
Subj ect Type= CA m eans t hat t his is a cert ificat ion aut horit y's cert ificat e and
" Pat h Lengt h Const raint = 1" m eans t hat t here can only be one cert ificat ion
aut horit y in t he cert ificat e's pat h.
This is t he cert ificat e's m essage digest t hat t he device calculat ed using t he
MD5 algorit hm . You can use t his value t o verify wit h t he cert ificat ion aut horit y
( over t he phone for exam ple) t hat t his is act ually t heir cert ificat e.
This is t he cert ificat e's m essage digest t hat t he device calculat ed using t he
SHA1 algorit hm . You can use t his value t o verify wit h t he cert ificat ion aut horit y
( over t he phone for exam ple) t hat t his is act ually t heir cert ificat e.
This read- only t ext box displays t he cert ificat e or cert ificat ion request in
Privacy Enhanced Mail ( PEM) form at . PEM uses lowercase let t ers, uppercase
let t ers and num erals t o convert a binary cert ificat e int o a print able form .
You can copy and past e t he cert ificat e int o an e- m ail t o send t o friends or
colleagues or you can copy and past e t he cert ificat e int o a t ext edit or and save
t he file on a m anagem ent com put er for lat er dist ribut ion ( via floppy disk for
exam ple) .
Click t his but t on and t hen Sa ve in t he File D ow n loa d screen. The Sa ve As
screen opens, browse t o t he locat ion t hat you want t o use and click Sa ve .
Click OK t o save your changes back t o t he device. You can only change t he
nam e.
Click Ca n ce l t o quit and ret urn t o t he Tr ust e d Ce r t ifica t e s screen.
NWA3000-N Series User's Guide