---
title: X.509 Certificate Exact Assertion
description: Values of this syntax hold an X.509 CertificateExactAssertion as described in X.509, clause 11.3.1.
component: pingds
version: 8.1
page_id: pingds:schemaref:s-X.509CertificateExactAssertion
canonical_url: https://docs.pingidentity.com/pingds/8.1/schemaref/s-X.509CertificateExactAssertion.html
---

# X.509 Certificate Exact Assertion

Values of this syntax hold an X.509 `CertificateExactAssertion` as described in X.509, clause 11.3.1.

Values are encoded using Generic String Encoding Rules, specified in [RFC 3641](https://www.rfc-editor.org/rfc/rfc3641.html) . The syntax follows this ABNF:

```
CertificateExactAssertion = "{" sp cea-serialNumber "," sp cea-issuer sp "}"

cea-serialNumber = id-serialNumber msp CertificateSerialNumber
cea-issuer = id-issuer msp Name

id-serialNumber = %x73.65.72.69.61.6C.4E.75.6D.62.65.72 ; 'serialNumber'
id-issuer = %x69.73.73.75.65.72 ; 'issuer'

Name = id-rdnSequence ":" RDNSequence
id-rdnSequence = %x72.64.6E.53.65.71.75.65.6E.63.65 ; 'rdnSequence'

CertificateSerialNumber = INTEGER
```

|               |                                                           |
| ------------- | --------------------------------------------------------- |
| *OID*         | 1.3.6.1.1.15.1                                            |
| *Description* | X.509 Certificate Exact Assertion                         |
| *Origin*      | [RFC 4523](https://datatracker.ietf.org/doc/html/rfc4523) |