CompTIA Advanced Security Practitioner (CASP+) CAS-004 Cert Guide

Chapter 22

Implementing the Appropriate PKI Solution

This chapter covers the following topics:

• PKI Hierarchy: This section covers certificate authorities (CAs), subordinate/intermediate CAs, and registration authorities (RAs).

• Certificate Types: This section covers wildcard certificates, extended validation, multidomain, and general purpose certificates.

• Certificate Usages/Profiles/Templates: This section covers client authentication, server authentication, digital signatures, and code signing.

• Extensions: This section covers Common Name (CN) and Subject Alternate Name (SAN).

• Trusted Providers: This section covers the importance of securing the supply chain.

• Trust Model: This section covers various PKI architectures.

• Cross-certification: This ...