4.1. 基本证书字段 (Basic Certificate Fields)

本节描述 X.509 v3 中定义的基本 certificate fields.

证书结构 (Certificate Structure)

Certificate  ::=  SEQUENCE  {
     tbsCertificate       TBSCertificate,
     signatureAlgorithm   AlgorithmIdentifier,
     signatureValue       BIT STRING  }

TBSCertificate 结构 (TBSCertificate Structure)

TBSCertificate  ::=  SEQUENCE  {
     version         [0]  EXPLICIT Version DEFAULT v1,
     serialNumber         CertificateSerialNumber,
     signature            AlgorithmIdentifier,
     issuer               Name,
     validity             Validity,
     subject              Name,
     subjectPublicKeyInfo SubjectPublicKeyInfo,
     issuerUniqueID  [1]  IMPLICIT UniqueIdentifier OPTIONAL,
     subjectUniqueID [2]  IMPLICIT UniqueIdentifier OPTIONAL,
     extensions      [3]  EXPLICIT Extensions OPTIONAL
     }

关键字段 (Key Fields)

• Version: Certificate version (v1, v2, v3)
• Serial Number: 证书的唯一标识符
• Signature: 用于签名证书的 algorithm
• Issuer: certificate issuer 的 DN
• Validity: 证书有效的时间段
• Subject: certificate subject 的 DN
• Subject Public Key Info: Subject 的 public key 和 algorithm
• Extensions: Certificate extensions (仅 v3)

---