X.509 Demystified Santosh Chokhani CygnaCom Solutions Inc. This talk will provide a short introduction to PKI, public key certificates and CRL. The talk will then describe the X.509 certificate format, including roles of various extensions in X.509 certificates. The talk will conclude with the techniques for certification path development and certification path validations and roles of the various certificate fields ad extensions in path development and path validation. ------------------------------------------------------------ Santosh Chokhani is the founder and President of CygnaCom Solutions Inc., an Entrust company specializing in PKI. Dr. Chokhani has made numerous contributions to PKI technology and related standards including trust models, security, policy and revocation processing. He was one of the industry representatives on the US Secretary of Commerce Committee on Key Management Infrastructure. Dr. Chokhani directs the CygnaCom laboratories for testing cryptographic products against FIPS 140-1 and for testing information security products against Common Criteria. Dr. Chokhani was a member of NSA's Technical Review Board. Dr. Chokhani has over twenty five years of experience in software development and information security. He has a Ph.D. in Electrical Engineering from Rutgers University.