X509Certificates Lifecycle

Question

I have started developing a CA with the bouncy castle library (assume that the operation server is the CA itself)

Can you, please, suggest the detailed (!!!) lifecycle of the certificate processing?

The matter is I've read lots of articles, but all of them describe the general process.

For example, what is the very beginning of aclient/server connection. What must the client give a server to get a certificate? I can use only a subject (a String object like "CN=some cn") to generate a certificate, but the is also a stuff like certificate request. What is the difference (proc and cons)? Or may be it is better to ask the client for a subject, then form a certificate request and provide it to the certificate generation method (actually, I can't see a profit of that variant)...

Answer 1

请参阅Book Beginning Cryptography with Java [Wrox 2005]在第6号课程中，您将获得有关X509Certificate及其用途的更多信息