X.509 Certificate Structure and PKI ComponentsX.509 certificate fields, encoding/extensions, PKI components (CA/RA/CSR), and the trust model