Metacrafter Registry

Datatypes

X.509 key identifier (SKI, AKI)

ID x509_key_identifier

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Identifier of a public key in the subjectKeyIdentifier and authorityKeyIdentifier extensions of an X.509 certificate. It links a certificate to the certificate of its issuer and to revocation lists. RFC 5280 suggests the 160-bit SHA-1 of the public key (20 octets) or a 64-bit form of it (8 octets), and allows other methods. The regexp covers the 20- and 8-octet forms in hexadecimal, compact or with colons. The compact 20-octet form looks like a SHA-1 hash: the type is told by the field name.

Categories
Cryptographic identifiers
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
80/100 · missing: mapping (Wikidata, Schema.org, ...), detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^(?:[0-9A-Fa-f]{40}|[0-9A-Fa-f]{16}|[0-9A-Fa-f]{2}(?::[0-9A-Fa-f]{2}){19}|[0-9A-Fa-f]{2}(?::[0-9A-Fa-f]{2}){7})$

Python re syntax.

Examples

ValueDescription
F0B481FE9812BFB528B9644003CBCC1F664E2803subjectKeyIdentifier of the example certificate of RFC 7468, section 5.1
F0:B4:81:FE:98:12:BF:B5:28:B9:64:40:03:CB:CC:1F:66:4E:28:03The same identifier with colons
E0986CEDDC7945B1D58115A79A1C75D86601A609subjectKeyIdentifier of a CA certificate in the register of accredited certification authorities (e-trust.gosuslugi.ru)
F0B481FE9812BFB528B9644003CBCC1F664E28 invalid19 octets

Translations

LanguageNameDescription
RussianИдентификатор ключа X.509 (SKI, AKI)Идентификатор открытого ключа в расширениях subjectKeyIdentifier и authorityKeyIdentifier сертификата X.509, обычно SHA-1 открытого ключа (20 октетов в шестнадцатеричном виде).

Sources

Use this record