Which of the following statements is/are correct regarding digital…
2021
Which of the following statements is/are correct regarding digital certificates?
I. A digital certificate does not include the name of the CA that issues it.
II. Digital certificates are based on public-key cryptography.
III. These certificates are available in only one strength, namely 128-bit encryption.
Answer: C. Only II — ConceptA digital certificate binds an identified subject to a public key. In the X.509 model, the certificate records the issuer that signed it and the…
- A.
I and II
- B.
Only III
- C.
Only II
- D.
I and III
Attempted by 931 students.
Show answer & explanation
Correct answer: C
Concept
A digital certificate binds an identified subject to a public key. In the X.509 model, the certificate records the issuer that signed it and the subject public-key information.
Certificate formats support multiple public-key and signature algorithms with different key sizes; they are not restricted to one fixed 128-bit encryption strength.
Application
Statement I conflicts with the X.509 issuer field, which identifies the certification authority that signed and issued the certificate.
Statement II follows from the certificate carrying a public key and being verified through public-key cryptographic signatures.
Statement III confuses a certificate with a single symmetric-cipher strength; certificate algorithms and key sizes can vary.
Cross-check
Checking the X.509 TBSCertificate structure shows both issuer and subjectPublicKeyInfo fields, while its algorithm identifiers allow different cryptographic choices.
Therefore, only statement II is correct.