CertiGuide to Security+  9  Chapter 4:  Basics of Cryptography (Domain 4.0; 15%)       9  4.3  PKI (Public Key Infrastructure)            9  4.3.1  Certificates

4.3.1.1  Certificate Policies 1 4.3.2  Revocation

The Certificate Practice Statement³⁹⁷ (CPS) is a detailed statement of the procedures and practices used by the certificate authority in managing the certificates it issues. It describes how the certificate policies are interpreted in the context of operating procedures and system architecture within the organization.³⁹⁸

Kinds of information that may be found in a Certificate Practice Statement include:

• Action steps to be taken by the subscriber and the CA to establish a digital certificate for the subscriber.
  
  
• Details of how the subscriber’s identity is validated, for each type of certificate offered by the CA.
  
  
• Length of time for which the certificate is valid.
  
  
• How to request a certificate revocation.
  
  
• CA’s archival policies.
  
  
• CA’s physical, technical and human security controls.

4.3.1.1  Certificate Policies 1 4.3.2  Revocation