A User Certificateis a Certificateis issued by certifying authority and identifies a user.
The X.509 v3 fields in a User Certificateswith specific requirements are shown in Table 44.
|
Field |
Description |
|
subject |
The distinguished name of the User. The Common Name attribute shall be specified and should be name of the user. The Organization should be provided. Other attributes may be specified. |
|
authorityKeyIdentifier |
Provides more information about the key used to sign the Certificate. It shall be specified. |
|
basicConstraints |
The basicConstraintsfieldis completely described in RFC 5280. The cAflag Identifies whether the subject of the Certificateis a CA The pathLengthspecifies the maximum depth of valid chains that include this Certificate. The cAflag shall be FALSE for User Certificates. The pathLength shall not be present. |