[x500standard] Intermediate CA vs. subject CA

From: "Erik Andersen" <era@xxxxxxx>
To: "Directory list" <x500standard@xxxxxxxxxxxxx>, "SG17-Q11" <t09sg17q11@xxxxxxxxxxxxx>, "PKIX" <pkix@xxxxxxxx>
Date: Sun, 24 Jul 2011 11:46:13 +0200

The terms intermediate CA and subject CA are used in the PKIX publications
and in X.509. I have not found any exact definitions of those term in any
PKIX document, but found some in 8.1.2 of X.509, but I am not sure that
these definition are generally accepted in the PKI community.

 

According to an intermediate CA is an CA issuing cross-certificate, while
the subject CA is the one for which the cross-certificate is issued.
However, the two CAs could have both roles.

 

Erik Andersen

Andersen's L-Service

Elsevej 48,

DK-3500 Vaerloese

Denmark

Mobile: +45 2097 1490

e-amail: era@xxxxxxx

Skype: andersen-erik

http://www.x500.eu/

http://www.x500standard.com/

 <http://dk.linkedin.com/in/andersenerik>
http://dk.linkedin.com/in/andersenerik

[x500standard] Intermediate CA vs. subject CA

Other related posts: