Author Archives: Ebrahim Ghasemi

Does defining "a minimum path length" for certification validation have any security benefit?

Posted on by

As you may know, Common Criteria (AKA ISO/IEC15408: A standard for IT Security Evaluation) have provided some security base-line documents named "Protection Profile" for software developers and product manufacturers. Developers a… Continue reading Does defining "a minimum path length" for certification validation have any security benefit?→

What problem does "max_path_length" attribute in certificates are going to solve?

Posted on by

I’m trying to understand the purpose of defining pathLenConstraint and max_path_length in RFC5280 (Internet X509 PKI Certificate and CRL Profile):
For pathLenConstraint The above mentioned RFC states:

The pathLenConstraint field is meanin… Continue reading What problem does "max_path_length" attribute in certificates are going to solve?→

Can an Intermediate CA extend its "Certificate Key Usage" by issuing a new certificate for itself?

Posted on by

I’m trying to understand the purpose of defining self-issued certificate concept in RFC5280 (Internet X509 PKI Certificate and CRL Profile):
Regarding this concept the RFC states:

This specification covers two classes of certificates:

CA… Continue reading Can an Intermediate CA extend its "Certificate Key Usage" by issuing a new certificate for itself?→