Forum Discussion

eesun_276598's avatar
Sep 18, 2016

RSA Certificate & Key

Hi After going to "System ›› File Management : SSL Certificate List ", we can see in content column, there are several types of the content:

 

  1. RSA Certificate & Key
  2. RSA Certificate
  3. Certificate Bundle

My question is what is difference among the three? Thank you

 

3 Replies

  • RSA Certificate & Key, contains cetificates with private keys (pfx) RSA Certificate, contains certificates without private keys Certificate Bundle, contains more then one certificate merged to one file.

     

    Aviv Hassidim

     

  • Thank you so much for your reply.

     

    "Certificate Bundle, contains more then one certificate merged to one file."

     

    Does this contain private key?

     

    And we have a certificate, which is like abcd.crt. Do you think it should be "RSA Certificate & Key", "RSA Certificate" or "Certificate Bundle" after we import the abcd.crt?

     

    • Saravanan_M_K_1's avatar
      Saravanan_M_K_1
      Historic F5 Account

      Does this contain private key?

       

      No. It will not contain private key. Only the certificates.

       

      And we have a certificate, which is like abcd.crt. Do you think it should be "RSA Certificate & Key", "RSA Certificate" or "Certificate Bundle" after we import the abcd.crt?

       

      It depends on your file format. Some format like PFX or P12 allows to bundle both certificate and key together in a single file. You need the key only for the server certificate and not for any of the intermediate CA certificate.

       

      For a good understanding of how SSL/TLS works, I suggest to read the book "Bulletproof SSL and TLS" by Ivan Ristic. https://www.feistyduck.com/books/bulletproof-ssl-and-tls/ The ebook (PDF version) is more up to date compare to the printed version. So you may want to buy the ebook. Ebook is regularly updated as well.