The latter are always wrapped in public key certificates. 后者一直包装在公钥证书中。
Subjects can be identified by either the issuer and serial number of their public key certificate or by the key identifier of their public key certificate. 可由主题的公钥证书的颁发者和序列号或由公钥证书的密钥标识符对主题进行标识。