ZyXEL Communications P-660 series Guia do Utilizador descarregar pdf (Página 124)

Chapter 9 Certificates

P-660R-F1 Series User’s Guide

124

Certification Path Click the Refresh button to have this read-only text box display the hierarchy

of certification authorities that validate the certificate (and the certificate

itself).

If the issuing certification authority is one that you have imported as a trusted

certification authority, it may be the only certification authority in the list

(along with the certificate itself). If the certificate is a self-signed certificate,

the certificate itself is the only one in the list. The ZyXEL Device does not trust

the certificate and displays “Not trusted” in this field if any certificate on the

path has expired or been revoked.

Refresh Click this to display the certification path.

Certificate

Information

These read-only fields display detailed information about the certificate.

Type This field displays general information about the certificate. CA-signed means

that a Certification Authority signed the certificate. Self-signed means that the

certificate’s owner signed the certificate (not a certification authority).

“X.509” means that this certificate was created and signed according to the

ITU-T X.509 recommendation that defines the formats for public-key

certificates.

Version This field displays the X.509 version number.

Serial Number This field displays the certificate’s identification number given by the

certification authority or generated by the ZyXEL Device.

Subject This field displays information that identifies the owner of the certificate, such

as Common Name (CN), Organizational Unit (OU), Organization (O) and

Country (C).

Issuer This field displays identifying information about the certificate’s issuing

certification authority, such as Common Name, Organizational Unit,

Organization and Country.

With self-signed certificates, this is the same as the Subject Name field.

Signature Algorithm This field displays the type of algorithm that was used to sign the certificate.

The ZyXEL Device uses rsa-pkcs1-sha1 (RSA public-private key encryption

algorithm and the SHA1 hash algorithm). Some certification authorities may

use rsa-pkcs1-md5 (RSA public-private key encryption algorithm and the MD5

hash algorithm).

Valid From This field displays the date that the certificate becomes applicable. The text

displays in red and includes a Not Yet Valid! message if the certificate has not

yet become applicable.

Valid To This field displays the date that the certificate expires. The text displays in red

and includes an Expiring! or Expired! message if the certificate is about to

expire or has already expired.

Key Algorithm This field displays the type of algorithm that was used to generate the

certificate’s key pair (the ZyXEL Device uses RSA encryption) and the length of

the key set in bits (1024 bits for example).

Subject Alternative

Name

This field displays the certificate owner‘s IP address (IP), domain name (DNS)

or e-mail address (EMAIL).

Key Usage This field displays for what functions the certificate’s key can be used. For

example, “DigitalSignature” means that the key can be used to sign

certificates and “KeyEncipherment” means that the key can be used to encrypt

text.

Basic Constraint This field displays general information about the certificate. For example,

Subject Type=CA means that this is a certification authority’s certificate and

“Path Length Constraint=1” means that there can only be one certification

authority in the certificate’s path.

LABEL DESCRIPTION

1 2 ... 119 120 121 122 123 124 125 126 127 128 129 ... 267 268

Comentários a estes Manuais

Sem comentários

ZyXEL Communications P-660 series Guia do Utilizador Página 124

Comentários a estes Manuais

Manuais e produtos relacionados com Routers ZyXEL Communications P-660 series