[1] RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
( 版)
http://tools.ietf.org/html/rfc5280#section-3
end entity
user of PKI certificates and/or end user system that is the subject of a certificate;