Home/ Questions/Q 5966107
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-22T19:44:48+00:00

I’m trying validate an X.509 certificate received over a network. I have understood that

  • 0

I’m trying validate an X.509 certificate received over a network. I have understood that the digital signature is created by creating a message digest of the fields(don’t know which fields) in the signature and then encrypting it using the CA(Certificate Authority) private Key.We can validate the certificate by decrypting the digital signature using CA public key and comparing it with the message digest of the certificate fields.

I’m stuck at this point as I don’t know which all fields I should take to create the message digest for the validation. Can somebody please help me out

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    From a glance at the RFC it appears to be the whole tbsCertificate field.

    […] a digital signature computed upon
    the ASN.1 DER encoded tbsCertificate. The ASN.1 DER encoded
    tbsCertificate is used as the input to the signature function.

    • 0