“…In X.509, a certificate includes a distinguished name [29,43], which is chosen to adequately identify a legal person, and is verified as accurate by the certification authority. In PGP, a certificate contains unspecified identifying information, "such as his or her name, user ID, photograph, and so on" [44]; this is usually an e-mail address.…”