◄ Wiki / Crypto
X.509
The standard format for digital certificates that bind an identity to a public key.
X.509 is the certificate format underpinning TLS and much of internet security: it packages a public key together with an identity (like a domain name) and signatures forming a chain of trust. Parsing an X.509 certificate just reads its structure — as zsec warns, parsing is not validation; actually verifying the chain and signatures is a separate, essential step.
See also
- trust anchorThe known-good root certificate that a chain of certificates must ultimately trace back to before you'll trust it.
- wildcard matchingLetting one certificate cover many hostnames by matching a pattern like *.example.com.
- zsecThe project's self-contained security core, built without relying on outside libraries.