Question
A senior cybersecurity engineer is solving a digital certificate issue in which the CA denied certificate issuance due to failed subject identity validation. At which of the following steps within the PKI enrollment process would the denial have occurred?
- A. RA Correct
- B. OCSP
- C. CA
- D. IdP
Explanation
In PKI enrollment, the registration authority authenticates the subject and verifies its identity before passing the request to the CA for signing, so a failed identity validation is a denial at the RA step. The CA issues and signs certificates once the RA has approved the request. OCSP only reports the revocation status of certificates already issued, and an IdP authenticates users to applications, not to the certificate enrollment process.
