The Subject, in security, is the thing being secured. In this case it could be a person's email or a website or a machine.
If we take the example of an email, say my email, then the subject key container would be the protected location containing my private key.
The certificate store usually refers to the Microsoft certificate store which contains certificates form trusted roots, machines on the network, people etc. In my case the subjects certificate store would be the place, within this store, holding my certificates.
If you are working within a Microsoft domain then the subject name will invariably hold the Distinguished Name, of the subject, which is how the domain references the subject and holds it in its directory. e.g. CN=Mark Sutton, OU=Developers, O=Mycompany C=UK
To look at your certificates on a Microsoft machine:-
Log in as you run>mmc Select File>add/remove snap-in and select certificates then select my user account click Finish then close then ok. Look in the personal area of the store.
In the other areas of the store you will see the other trusted certificates used to validate signatures etc.
My typical expectation is than when "subject" is used a context like this, it means the target of the certificate. If you think of a certificate as a cryptographically secured description of a thing (person, device, communication channel, etc), then the subject is the stuff related to that thing.
It's not the thing itself. For example, no one would say "the subject takes his SmartCard and authenticates his PIN". That would be the "user".
But it usually relates to the various data items related to that that thing. For example:
Subject DN = Subject Distinguished Name = the unique identifier for what this thing is. Includes information about the thing being certified, including common name, organization, organization unit, country codes, etc.
Subject Key = part (or all) of the certificate's private/public key pair. If it's coming from the certificate, it's the public key. If it's coming from a key store in a secure location, it's probably the private key. Either part of the key is the cryptographic data used by the thing that received the certificate.
Subject certificate - the end point for the transaction - this is the thing requesting some secure capability - like integrity checking, authentication, privacy, etc.
Usually, it's used to distinguish between the other players in the PKI world. Namely the "issuer" and the "root". The issuer is the CA that issued the cert (to the subject), and the root is the CA that is end point of all the trust in the heirarchy. The typical relationship is root--->issuer--->subject.
The subject field identifies the entity associated with the public key stored in the subject public key field. The subject name MAY be carried in the subject field and/or the subjectAltName extension.
X.509 certificates have a Subject (Distinguished Name) field and can also have multiple names in the Subject Alternative Name extension.
The Subject DN is made of multiple relative distinguished names (RDNs) (themselves made of attribute assertion values) such as "CN=yourname" or "O=yourorganization".
In the context of the article you're linking to, the subject would be the user/owner of the cert.
Subject is the certificate's common name and is a critical property for the certificate in a lot of cases if it's a server certificate and clients are looking for a positive identification.
As an example on an SSL certificate for a web site the subject would be the domain name of the web site.
发布评论
评论（4）
在安全性方面，主体是被保护的事物。 在这种情况下，它可以是一个人的电子邮件、一个网站或一台机器。
如果我们以电子邮件为例，比如说我的电子邮件，那么主题密钥容器将是包含我的私钥的受保护位置。
证书存储通常指的是 Microsoft 证书存储，其中包含来自受信任根、网络上的计算机、人员等的证书。在我的情况下，主题证书存储将是在该存储中保存我的证书的位置。
如果您在 Microsoft 域中工作，则主题名称将始终包含主题的可分辨名称，这就是域引用主题并将其保存在其目录中的方式。 例如 CN=Mark Sutton、OU=Developers、O=Mycompany C=UK
要在 Microsoft 计算机上查看您的证书：-
以您的身份登录
运行>mmc
选择“文件”>“添加/删除管理单元”并选择证书，然后选择我的用户帐户
单击完成然后关闭然后确定。
查看商店的个人区域。
在商店的其他区域，您将看到用于验证签名等的其他受信任证书。
The Subject, in security, is the thing being secured. In this case it could be a person's email or a website or a machine.
If we take the example of an email, say my email, then the subject key container would be the protected location containing my private key.
The certificate store usually refers to the Microsoft certificate store which contains certificates form trusted roots, machines on the network, people etc. In my case the subjects certificate store would be the place, within this store, holding my certificates.
If you are working within a Microsoft domain then the subject name will invariably hold the Distinguished Name, of the subject, which is how the domain references the subject and holds it in its directory. e.g. CN=Mark Sutton, OU=Developers, O=Mycompany C=UK
To look at your certificates on a Microsoft machine:-
Log in as you
run>mmc
Select File>add/remove snap-in and select certificates then select my user account
click Finish then close then ok.
Look in the personal area of the store.
In the other areas of the store you will see the other trusted certificates used to validate signatures etc.
我的典型期望是，当“主题”在这样的上下文中使用时，它意味着证书的目标。 如果您将证书视为对事物（人、设备、通信渠道等）的加密安全描述，那么主题就是与该事物相关的事物。
这不是事情本身。 例如，没有人会说“主体拿走他的智能卡并验证他的 PIN”。 这就是“用户”。
但它通常涉及与该事物相关的各种数据项。 例如：
通常，它用于区分 PKI 世界中的其他参与者。 即“发行者”和“根”。 颁发者是（向主题）颁发证书的 CA，而根是作为层次结构中所有信任的端点的 CA。 典型的关系是根--->发行者--->主体。
My typical expectation is than when "subject" is used a context like this, it means the target of the certificate. If you think of a certificate as a cryptographically secured description of a thing (person, device, communication channel, etc), then the subject is the stuff related to that thing.
It's not the thing itself. For example, no one would say "the subject takes his SmartCard and authenticates his PIN". That would be the "user".
But it usually relates to the various data items related to that that thing. For example:
Usually, it's used to distinguish between the other players in the PKI world. Namely the "issuer" and the "root". The issuer is the CA that issued the cert (to the subject), and the root is the CA that is end point of all the trust in the heirarchy. The typical relationship is root--->issuer--->subject.
证书的主题是与其公钥关联的实体（即证书的“所有者”）。
正如 RFC 5280 所说：
X.509 证书有一个主题（可分辨名称）字段，并且在主题备用名称扩展中也可以有多个名称。
主体 DN 由多个相对专有名称 (RDN) 组成（它们本身由属性断言值组成），例如“CN=你的名字”或“O=你的组织”。
在您链接到的文章的上下文中，主题将是证书的用户/所有者。
The subject of the certificate is the entity its public key is associated with (i.e. the "owner" of the certificate).
As RFC 5280 says:
X.509 certificates have a Subject (Distinguished Name) field and can also have multiple names in the Subject Alternative Name extension.
The Subject DN is made of multiple relative distinguished names (RDNs) (themselves made of attribute assertion values) such as "CN=yourname" or "O=yourorganization".
In the context of the article you're linking to, the subject would be the user/owner of the cert.
主题是证书的通用名称，在很多情况下，如果它是服务器证书并且客户端正在寻找肯定的标识，那么主题是证书的关键属性。
作为网站 SSL 证书的示例，主题是网站的域名。
Subject is the certificate's common name and is a critical property for the certificate in a lot of cases if it's a server certificate and clients are looking for a positive identification.
As an example on an SSL certificate for a web site the subject would be the domain name of the web site.