Skip to content

docs: 补充PKI博文缺失的数字证书章节 - #39

Merged
suiyideali merged 1 commit into
mainfrom
docs/add-digital-certificate-section-to-pki-post
Aug 10, 2026
Merged

docs: 补充PKI博文缺失的数字证书章节#39
suiyideali merged 1 commit into
mainfrom
docs/add-digital-certificate-section-to-pki-post

Conversation

@suiyideali

Copy link
Copy Markdown
Owner

变更内容

为《公钥基础设施PKI(Public Key Infrastructure)》博文补充缺失的数字证书章节。

原博文只把「数字证书」作为 PKI 组件表的一行和生命周期流程的一句话带过,缺少对证书本身的展开讲解。

新增章节:数字证书(Digital Certificate):信任的最小单元

  • 数字证书的本质:身份信息 + 公钥 + CA 数字签名
  • X.509 v3 标准字段表:版本/序列号/签名算法/颁发者/有效期/主体/主体公钥/扩展/签名值
  • 扩展字段:Basic Constraints、Key Usage/EKU、SAN、CDP、AIA、SCT
  • 证书防篡改机制:CA 签名原理与验签流程

自测题

  • 新增题 5(EKU 用途校验),原题 5 顺延为题 6

验证

  • ✅ 已用 ego-browser 实际渲染验证(标题结构、表格、公式、命令块、自测题均正常)

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

🤖 Generated with Claude Code

新增「数字证书(Digital Certificate):信任的最小单元」章节:
- 证书本质与"身份信息+公钥+CA签名"公式
- X.509 v3 标准字段表
- 扩展字段(Key Usage/EKU/SAN/CT等)及其用途约束
- 证书防篡改机制
- 顺延并新增自测题(EKU用途校验)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@suiyideali
suiyideali merged commit 7377bcb into main Aug 10, 2026
4 of 5 checks passed
@suiyideali
suiyideali deleted the docs/add-digital-certificate-section-to-pki-post branch August 10, 2026 11:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant