---
id: "kerione-why-x509-certs-should-be-secondary-evidence"
type: "paper"
type_label: "Papers and paper collections"
title: "Why X509 Certs Should Be Secondary Evidence of Org Identity"
maintainer: "Daniel Hardman"
authors:
  - "Daniel Hardman"
date: null
year: null
reading_level: "practitioner"
reading_level_label: "Practitioner"
reading_level_meaning: "architects, product people and adopters who know identity systems"
evidence: "informative"
evidence_meaning: "an author's paper, deck, tutorial or post explaining the suite"
status: "active"
status_meaning: "changed within the last six months, or a live service"
access: "public"
access_meaning: "anyone with the link"
topics:
  - "comparisons"
  - "theory"
roles:
  - "security-architect"
  - "communications"
  - "researcher"
source_url: "https://dhh1128.github.io/papers/x509-prob.html"
source_license: null
source_license_note: null
found_on: "keri-one-resources"
kerisse_credit: false
abstract_license: "CC BY 4.0"
abstract_license_url: "https://creativecommons.org/licenses/by/4.0/"
abstract_attribution: "KSKB, the KERISuite Knowledge Base (https://kskb.dev/)"
last_checked: "2026-10-14"
kskb_url: "https://kskb.dev/cards/kerione-why-x509-certs-should-be-secondary-evidence/"
kskb_app_url: "https://kskb.dev/#item/kerione-why-x509-certs-should-be-secondary-evidence"
kskb_record_url: "https://kskb.dev/data/kskb/resources/kerione-why-x509-certs-should-be-secondary-evidence"
kskb_markdown_url: "https://kskb.dev/export/cards/kerione-why-x509-certs-should-be-secondary-evidence.md"
---

# Why X509 Certs Should Be Secondary Evidence of Org Identity

A position paper by Daniel Hardman arguing that X.509 certificates should be secondary, not primary, evidence of an organization's identity, with ACDCs (Authentic Chained Data Containers) such as vLEIs carrying the primary weight. It works through mismatched lifespans, opaque governance, the post-quantum path, single-key signing, missing pre-rotation, unsequenced signatures, maintenance, revocation and scale. For practitioners choosing evidence for organizational identity.

Labels: reading level Practitioner; evidence informative (an author's paper, deck, tutorial or post explaining the suite).
Source: https://dhh1128.github.io/papers/x509-prob.html (license not recorded).
The abstract is KSKB's own text under Creative Commons Attribution 4.0 (CC BY 4.0), https://creativecommons.org/licenses/by/4.0/; credit KSKB, the KERISuite Knowledge Base (https://kskb.dev/).