全部

1·The certificate contains identity credentials and has a pair of private and public keys associated with it.

这个证书中包含身份凭证，并且具有一对与之相关联的私钥和公钥。

2·The identity may be represented as the name of the recipient, the public key certificate of the recipient, or in some other way.

该身份可以用接收方的名字、接收方的公用密钥证书或以其它方式来表示。

3·Certificate: a public key with some information attached about the identity of its owner and, optionally, the signatures of third parties confirming this identity.

证书：附带了某些有关其所有者身份信息的公钥；可选地，该信息为确认此身份的第三方的签名。

4·Most certificate authorities attempt to verify a person's identity to the best of their ability before issuing a digital certificate with that person's name on it.

大部分认证权威都会在发行带有个人名的数字证书之前就试图验证他的身份就是本人。

5·There are two cases to consider: that of revoking privileges granted to an otherwise legitimate identity, and that of revoking a certificate that has been compromised.

需要考虑以下两种情况：撤销授予在其他情况下合法身份的权限和撤销被破坏的证书。

6·In addition, a reputable certificate authority will require proof of the requestor's identity before issuing a certificate.

此外，著名的证书颁发机构需要先验证请求者的身份，然后才会颁发证书。

7·In addition, there is now a second check so that the identity of the certificate matches some string that the administrator has designed to filter out all but a known set of legitimate users.

此外，现在还有第二项检查，目的是让证书标识匹配某个字符串，管理员已将该字符串设计为过滤出除已知合法用户之外的所有用户。

8·To achieve this, you publish policies asserting that the client runtime must ensure message confidentiality and must provide evidence of the user's identity (user ID/password or a certificate).

要支持各种客户机运行时，请发布断言客户机运行时必须确保消息机密性，并必须提供用户身份的证据（用户 ID/密码或证书）的策略。

9·The identity asserted on the sending side takes the form of the original credentials provided for the initial login (for example, user ID, DN, certificate).

发送端断言的标识采用为初始登录（例如，用户 ID、DN、证书）提供的原始凭据的形式。

10·When using certificate authentication (client or server), you need to understand that each signer in the trust store represents a trusted provider of identity information (a certificate).

在使用证书身份验证(客户端或服务器)时，您需要理解信任存储库中的每个签署者都代表一个身份信息(证书)的受信任提供者。