certificate

{
  "id": "MLC-T-CYB-000606",
  "term": "certificate",
  "field": "Cybersecurity",
  "definition": "1. A set of data that uniquely identifies a public key (which has a corresponding private key) and an owner that is authorized to use the key pair. The certificate contains the owner’s public key and possibly other information and is digitally signed by a Certification Authority (i.e., a trusted party), thereby binding the public key to the owner.\n\n2. A set of data that uniquely identifies a public key that has a corresponding private key and an owner that is authorized to use the key pair. The certificate contains the owner’s public key and possibly other information and is digitally signed by a certification authority (i.e., a trusted party), thereby binding the public key to the owner.\n\n3. A digital representation of information which at least (1) identifies the certification authority (CA) issuing it, (2) names or identifies its subscriber, (3) contains the subscriber's public key, (4) identifies its operational period, and (5) is digitally signed by the certification authority issuing it.\n\n4. A set of data that uniquely identifies a key pair owner that is authorized to use the key pair, contains the owner’s public key and possibly other information, and is digitally signed by a Certification Authority (i.e., a trusted party), thereby binding the public key to the owner.\n\n5. See public-key certificate.\n\n6. See public key certificate.\n\n7. A data structure that contains an entity’s identifier(s), the entity's public key (including an indication of the associated set of domain parameters) and possibly other information, along with a signature on that data set that is generated by a trusted party, i.e., a certificate authority, thereby binding the public key to the included identifier(s).\n\n8. A set of data that uniquely identifies an entity, contains the entity’s public key and possibly other information, and is digitally signed by a trusted party, thereby binding the public key to the entity identified in the certificate. Additional information in the certificate could specify how the key is used and the validity period of the certificate.\n\n9. A set of data that uniquely identifies an entity, contains the entity’s public key and possibly other information, and is digitally signed by a trusted party, thereby binding the public key to the entity. Additional information in the certificate could specify how the key is used and its validity period.\n\n10. A set of data that uniquely identifies an entity, contains the entity's public key and possibly other information, and is digitally signed by a trusted party, thereby binding the public key to the entity. Additional information in the certificate could specify how the key is used and its validity period.\n\n11. A set of data that uniquely identifies an entity, contains the entity's public key and possibly other information, and is digitally signed by a trusted party, thereby binding the public key to the entity. Additional information in the certificate could specify how the key is used and its validity period. (Certificates in this practice guide are based on IETF RFC 5280).\n\n12. A set of data that uniquely identifies an entity, contains the entity's public key and possibly other information, and is digitally signed by a trusted party, thereby binding the public key to the entity. Additional information in the certificate could specify how the key is used and its validity period. (Certificates in this practice guide are based on IETF RFC 5280.)\n\n13. A digital document issued and digitally signed by the private key of a certificate authority that binds an identifier to a subscriber’s public key. The certificate indicates that the subscriber identified in the certificate has sole control of and access to the private key. See also [RFC5280].\n\n14. Also known as a digital certificate. A digital representation of information which at least\n1. identifies the certification authority issuing it,\n2. names or identifies its subscriber,\n3. contains the subscriber's public key,\n4. identifies its operational period, and\n5. is digitally signed by the certification authority issuing it.",
  "synonyms": [
    "public key certificate",
    "public-key certificate"
  ],
  "references": [
    "FIPS 186-5",
    "FIPS 204",
    "CNSSI 4009-2022",
    "NIST SP 800-89",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 1800-21C; NIST SP 800-56B Rev. 2",
    "NIST SP 800-175B Rev. 1",
    "NIST SP 1800-16B",
    "NIST SP 1800-16C",
    "NIST SP 1800-16D",
    "NIST SP 800-63-4; NIST SP 800-63A-4",
    "NISTIR 7711",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/certificate/"
}