101-150 Digital Security Concepts

Front

Self-signed certificate

Back

A digital certificate that has been signed by the entity that issued it, rather than by a CA.

Front

Certificate signing request (CSR)

Back

A Base64 ASCII file that a subject sends to a CA to get a certificate.

Front

Common name (CN)

Back

An X500 attribute expressing a host or username, also used as the subject identifier for a digital certificate.

Front

Subject alternative name (SAN)

Back

A field in a digital certificate allowing a host to be identified by multiple host names/subdomains.

Front

Wildcard domain

Back

In PKI, a digital certificate that will match multiple subdomains of a parent domain.

Front

Certificate revocation list (CRL)

Back

A list of certificates that were revoked before their expiration date.

Front

Online Certificate Status Protocol (OCSP)

Back

Allows clients to request the status of a digital certificate, to check whether it is revoked.

Front

Key management system

Back

In PKI, procedures and tools that centralize generation and storage of cryptographic keys.

Front

Entropy

Back

A measure of disorder. Cryptographic systems should exhibit high entropy to better resist brute force attacks.

Front

Pseudo RNG (PRNG)

Back

The process by which an algorithm produces numbers that approximate randomness without being truly random.