Which X500 attribute is commonly used as the host or user identifier in a digital certificate's subject?

Which X500 attribute is commonly used as the host or user identifier in a digital certificate's subject?

• A. Subject Alternative Name (SAN)
• B. Entropy
• C. Common Name (CN)
• D. Pseudo RNG (PRNG)

Answer: (C)

In X.509 certificates, the Common Name (CN) attribute in the subject’s distinguished name has traditionally served as the host or user identifier. It’s where the entity’s name or the host’s hostname is placed, and systems have long used this value to match the certificate to the entity presenting it. Modern practice often uses the Subject Alternative Name (SAN) extension to explicitly list all identities the certificate covers, such as hostnames, IP addresses, and emails, but CN remains the classic identifier historically found in the subject. The other options—entropy and a pseudo-random number generator—are about randomness, not identity fields in certificates.

In X.509 certificates, the Common Name (CN) attribute in the subject’s distinguished name has traditionally served as the host or user identifier. It’s where the entity’s name or the host’s hostname is placed, and systems have long used this value to match the certificate to the entity presenting it. Modern practice often uses the Subject Alternative Name (SAN) extension to explicitly list all identities the certificate covers, such as hostnames, IP addresses, and emails, but CN remains the classic identifier historically found in the subject. The other options—entropy and a pseudo-random number generator—are about randomness, not identity fields in certificates.