Certification Authority (CA)
and Registration Authority (RA)
Directory service (e.g. LDAP server)
User
Certificates
Certificates + Status information
Certificate issuing process