Appendix A: Digital Certificates - HP AB500A - Integrated Lights-Out Advanced Technology Brief

Appendix A: Digital certificates

A digital certificate is an integral component of the SSL encryption technology. The digital certificate
provides data integrity by ensuring that a third party cannot insert false data into the encrypted data
stream. A digital certificate includes a public key based on RSA encryption and an accompanying
digital signature (see Table A-1).
Table A-1. Components of digital certificates
Digital certificate component
Unique name of owner
Unique serial number
Period of validity
Revocation Information
Alternate subject identifiers
Public key
Digital signature of certificate
authority
Name of issuing certificate
authority
A digital signature typically uses the sophisticated encryption of the RSA encryption algorithm rather
than a simple hashing signature (Figure A-1). The RSA algorithm, developed by Rivest, Shamir, and
Adleman, is widely used for encrypting data using a public key/private key system. Also known as
"asymmetric" cryptography, this system uses a widely distributed public key and a private key that
remains secret to the owner. The two keys are mathematically linked so that data encrypted with the
public key can be decrypted only with the private key. Conversely, data encrypted with the private
key can be decrypted only with the public key. Because the algorithm uses two large prime numbers
(the public key and the private key) that are difficult to factor, the algorithm is difficult to compute and
therefore gives any data encrypted with that algorithm a reasonable amount of security.
Example
Subject DN: cn = Bob Smith, c = ACME, C = US
8391037
Start: 1/5/97 1:02
End: 7/5/98 1:02
CRL: cn = CRL2, 0 = ACME, c = US
SubjectAltName: IP, DNS, email
mQCpAi3aE40AAAEE4KSlkYOhLlSNTrVcbogQuto...
wJD3Wsm8VqCQSjK/YpwOcVCcCG+Ai+drsqz4E...
CA DN: o = ACME, c = US
36