Shulou(Shulou.com)06/03 Report--

PKC: Public-Key certificate public key certificate or Certificate for short

CA: Certification Authority authentication body that applies a digital signature to the public key

CRL: invalidation list of Certificate Revocation List certificates

PKI: Public Key Infrastructure public key basic setting is the general name of a series of specifications and specifications developed in order to use the public key more effectively.

PKCS: a kind of PKI, Public-Key Cryptography Standards is developed by RSK.

Root CA: root CA, the highest-level institution that digitally signs its public key becomes self-signed (Self-signature).

The difference between digital certificate format (cer and pfx)

1. Pfx certificate file is a certificate form with private key, defined by Public Key Cryptography Standards # 12 PKCS certificate 12 standard, which contains public key and private key in binary format.

two。 Binary coded certificate

There is no private key in the certificate, and DER encodes the certificate file in binary format, with cer as the suffix of the certificate file.

3.Base64-encoded certificate

There is no private key in the certificate, and the certificate file in BASE64 format also uses cer as the suffix of the certificate file.

From the definition, we can see that only the digital certificate in pfx format contains the private key, and the digital certificate in cer format has only the public key but no private key.

One item during the import of the pfx certificate is "Mark that this key is exportable. This will backup or transfer the key later." It is usually unselected, and if selected, others will have a chance to back up your key. If it is not selected, the key is also imported, but cannot be exported again. This ensures the security of the key.

If this item is not selected during the import process, the item "Export Private key" is grayed out and cannot be selected when making a certificate backup. Only public keys in cer format can be exported. If this item is selected on import, the Export Private key item on export is optional.

If you want to export the private key (pfx), you need to enter the password, this password is to re-encrypt the private key, so as to ensure the security of the private key, even if others get your certificate backup (pfx), do not know the password of the encrypted private key, it is impossible to import the certificate. On the contrary, if you only import and export certificates in cer format, you will not be prompted for a password. Because the public key is generally open to the public, there is no need for encryption

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.