x509 certificate format

Hi,

I want to use certificate to identify my thin client hardware .Only thin client terminal who

have certificate will be able to use my server software functionality.

I want to issue them certificate on the basis of following information.

1.HW serial Number

2.processor type

3.OS

I am not able to understand what should be the Key Usage Type.

Further i am not able to understand where i will put the hardware information x509

certificate.

Please suggest me how a x509 certificate should look like.

What should be in the

Subject Name

Issuer Unique Identifier (Optional)

Subject Unique Identifier (Optional)

OID of my certificate (should it be a new OID)

subject alternative name

Regards,

Sunil

[812 byte] By [sunhcla] at [2007-11-26 22:41:03]
# 1

You really have complete control over what is in the certificate. Of course, whatever choice you make has to work with all the other software that needs to understand your certificate.

You could, for example, place all the information in the subject name. You could encode it all in the CN, or use the other standard fields as well. You can also use the subject alternative name extension exclusively. Or some combination.

ghstarka at 2007-7-10 11:55:38 > top of Java-index,Security,Cryptography...