Certificates

In Jtrix, a certificate is a binding between a principal's public key and its X.500 distinguished name. The certificate must be signed by a principal, who is referred to as the certifying principal. A principal may certify itself.

The certifying principal should take reasonable steps to ensure:

1. X.500 name properly corresponds to certified principal.
2. X.500 name is probably unique and will probably remain so.