Patent ID: 11930125
Assignee: ENTRUST CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 16:
17. A computer-implemented method comprising:
generating, at a first root certificate authority from among a first root certificate authority and a second root certificate authority, a first root certificate, the first root certificate including:
an identity of the first root certificate authority;
a first key identifier associated with a first key associated with the first root certificate authority and an identity of a first digital signature algorithm used by the first root certificate authority; and
at least one extension including a second key identifier of a second key associated with the second root certificate authority and an identity of a second digital signature algorithm used by the second root certificate authority, wherein the second digital signature algorithm is a different algorithm from the first digital signature algorithm;

generating, at the second root certificate authority, a second root certificate, the second root certificate being generated concurrently with the first root certificate and including:
an identity of the second root certificate authority;
the second key identifier associated with the second key associated with the second root certificate authority and an identity of the second digital signature algorithm used by the second root certificate authority; and
at least one extension including the first key identifier of the first key associated with the first root certificate authority and an identity of the first digital signature algorithm used by the first root certificate authority; and

generating an intermediate certificate signed by the first root certificate using the first digital signature algorithm.