Ontology for the representation of aspects related to certificates (SSL, CFCA, etc.)
type: Ontology
version IRI: http://w3id.org/devops-infra/certificate/1.0.0
imports: http://w3id.org/devops-infra/core/1.0.0
imports: core
creator: David Chaves-Fraga (Ontology Engineering Group - Universidad Politécnica de Madrid)
creator: Hu Peng (Huawei Research Ireland)
creator: Jhon Toledo (Ontology Engineering Group - Universidad Politécnica de Madrid)
creator: José Mora (Huawei Research Ireland)
creator: Julián Arenas-Guerrero (Ontology Engineering Group - Universidad Politécnica de Madrid)
creator: Mingxue Wang (Huawei Research Ireland)
creator: Nicholas Burrett (Huawei Research Ireland)
creator: Oscar Corcho (Ontology Engineering Group - Universidad Politécnica de Madrid)
creator: Puchao Zhang (Huawei Research Ireland)
creator: Raúl Alcázar (Ontology Engineering Group - Universidad Politécnica de Madrid)
has format: http://w3id.org/devops-infra/certificate.owl
issued: 2021-02-15
license: https://creativecommons.org/licenses/by/4.0
preferred namespace prefix: devopscert
preferred namespace uri: http://w3id.org/devops-infra/certificate#
comment: This ontology has been created in the context of a collaboration between the Ontology Engineering Group and Huawei Research Ireland
version info: First official release

contains certificate
type: ObjectProperty
domain: Digital Certificate Bundle
range: Digital Certificate
comment: A Digital Certificate Bundle contains several Digital Certificates

has certificate deployment
type: ObjectProperty
domain: Digital Certificate
range: Digital Certificate Deployment
comment: A digital certificate can be deployed somewhere, and this is registered as a Digital Certificate Deployment

has certificate signing request
type: ObjectProperty
domain: Digital Certificate
range: Certificate Signing Request
comment: A Digital Certificate is obtained after a Certificate Signing Request

uses digital certificate
type: ObjectProperty
range: Digital Certificate
comment: Different types of entities (domains, servers, etc.) make use of one or several digital certificates

certificate application person
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The person in charge of the certificate application

certificate deployment person
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The person in charge of the certificate deployment

certificate deployment region
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The region for the certificate deployment

certificate purchase number
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The purchase number of the certificate

certificate type
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The type of certificate

certificate content
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The content of the certificate

domain
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: Also referred to as common name (CN). It is the fully qualified domain name for the certificate, the deployment of the certificate, or the certificate signing request. For example, *.example.org

expiry date
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: date
comment: The expiry date of the certificate

issuer
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The issuer of the certificate, also known as issuer common name

issuer organisation
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The organisation that issues the certificate

issuer organisation unit
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The organisational unit that issues the certificate

private key
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The private key of the certificate or the certificate signing request

public key
type: DatatypeProperty
sub property of: topDataProperty
domain: Certificate Signing Request
range: string
comment: The public key of the certificate signing request

real serial number
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The real serial number of the certificate

region
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The region for the certificate, the deployment of the certificate, etc.

serial number
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The serial number of the certificate

service
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate Deployment
range: string
comment: The service for which the Digital Certificate is deployed

site
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate Deployment
range: string
comment: The site for which the Digital Certificate is deployed

start date
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: date
comment: The start date of the certificate

user
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: The user of the certificate or certificate signing request, also known as user common name

user organisation
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: Also known as Organization Name (O). It is usually the legal name of a company or entity that is using the certificate, or has made the certificate signing request, and should commonly include any suffixes such as Ltd., Inc., or Corp. For example, Example Organisation, Ltd

user organisation country
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: Also referred to as country (C). The two-letter ISO code for the country of the organisation that uses the Digital Certificate or has made the Certificate Signing Request. For instance, ES

user organisation email
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: Also referred to as email address (EMAIL). The email contact (usually the certificate administrator or IT department) for the country of the organisation that uses the Digital Certificate or has made the Certificate Signing Request. For instance, info@example.org

user organisation locality
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: Also referred to as locality (L). The name of the locality (town, city, village, etc.) of the organisation that uses the Digital Certificate or has made the Certificate Signing Request. For instance, Boadilla del Monte

user organisation state
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: Also referred to as state (S). The name of the locality (province, region, county or state) of the organisation that uses the Digital Certificate or has made the Certificate Signing Requestte or Certificate Signing Request. For instance, Comunidad de Madrid

user organisation unit
type: DatatypeProperty
sub property of: topDataProperty
range: string
comment: Also known as Organizational Unit (OU). It is the organisational unit of the user of the certificate or certificate signing request. It is an internal department/division name. For example, IT Support

valid
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: boolean
comment: It determines whether the certificate is valid

vendor
type: DatatypeProperty
sub property of: topDataProperty
domain: Digital Certificate
range: string
comment: The vendor for the certificate

CFCA (China Financial Certification Authority) Certificate
type: Class
subclass of: Digital Certificate
comment: CFCA is a national Authority safety Certification organization which is established by the people's bank of China. CFCA certificates are issued by this organisation

Certificate Signing Request
type: Class
subclass of: Resource
subclass of: Restriction
  on property: private key
  all values from: string
subclass of: Restriction
  on property: public key
  all values from: string
subclass of: Restriction
  on property: user
  all values from: string
subclass of: Restriction
  on property: user organisation
  all values from: string
subclass of: Restriction
  on property: user organisation country
  all values from: string
subclass of: Restriction
  on property: user organisation email
  all values from: string
subclass of: Restriction
  on property: user organisation locality
  all values from: string
subclass of: Restriction
  on property: user organisation state
  all values from: string
subclass of: Restriction
  on property: user organisation unit
  all values from: string
comment: A Certificate Signing Request (also known as CSR or certification request) is a message sent from an applicant to a registration authority of the public key infrastructure in order to apply for a digital identity certificate. It usually contains the public key for which the certificate should be issued, identifying information (such as a domain name) and integrity protection (e.g., a digital signature). The most common format for CSRs is the PKCS #10 specification; another is the Signed Public Key and Challenge SPKAC format generated by some web browsers.

Digital Certificate
type: Class
subclass of: Resource
subclass of: Restriction
  on property: has certificate signing request
  all values from: Certificate Signing Request
subclass of: Restriction
  on property: certificate application person
  all values from: string
subclass of: Restriction
  on property: certificate deployment person
  all values from: string
subclass of: Restriction
  on property: certificate deployment region
  all values from: string
subclass of: Restriction
  on property: certificate purchase number
  all values from: string
subclass of: Restriction
  on property: certificate type
  all values from: string
subclass of: Restriction
  on property: certificate content
  all values from: string
subclass of: Restriction
  on property: domain
  all values from: string
subclass of: Restriction
  on property: expiry date
  all values from: date
subclass of: Restriction
  on property: issuer
  all values from: string
subclass of: Restriction
  on property: issuer organisation
  all values from: string
subclass of: Restriction
  on property: issuer organisation unit
  all values from: string
subclass of: Restriction
  on property: private key
  all values from: string
subclass of: Restriction
  on property: real serial number
  all values from: string
subclass of: Restriction
  on property: region
  all values from: string
subclass of: Restriction
  on property: serial number
  all values from: string
subclass of: Restriction
  on property: start date
  all values from: date
subclass of: Restriction
  on property: user
  all values from: string
subclass of: Restriction
  on property: user organisation
  all values from: string
subclass of: Restriction
  on property: user organisation unit
  all values from: string
subclass of: Restriction
  on property: valid
  all values from: boolean
subclass of: Restriction
  on property: vendor
  all values from: string
comment: Digital Certificates are electronic credentials that bind the identity of the certificate owner to a pair of electronic encryption keys, (one public and one private), that can be used to encrypt and sign information digitally.

Digital Certificate Bundle
type: Class
subclass of: Resource
subclass of: Restriction
  on property: contains certificate
  some values from: Digital Certificate
comment: A digital certificate bundle is a file that contains root and intermediate certificates.

Digital Certificate Deployment
type: Class
subclass of: Resource
subclass of: Restriction
  on property: domain
  all values from: string
subclass of: Restriction
  on property: service
  all values from: string
subclass of: Restriction
  on property: site
  all values from: string
comment: A Digital Certificate Deployment is the result of deploying a digital certificate in a specific domain and for a specific service on a site.

SSL Certificate
type: Class
subclass of: Digital Certificate
comment: An SSL certificate is a data file hosted in a website's origin server. SSL certificates make SSL/TLS encryption possible, and they contain the website's public key and the website's identity, along with related information. Devices attempting to communicate with the origin server will reference this file to obtain the public key and verify the server's identity. The private key is kept secret and secure.