Glossary term terminology
Certificate authority
A norganization that authorizes a certificate.
Certificate signing request(CSR)
A file that contains personal information used to generate a signing
certificate.
This file also contains the public key to be included in the
certificate, along with identifying information.
Client SSL certificate
A certificate that allowsa developer’s server to connect to an Apple
service.
For example, developers use a
client SSL certificate to communicate with the Apple Push Notification
service.
Entitlement
A single right granted to a particular app, tool, or other executable
that gives it additional permissions beyond what it would ordinarily
have.
The term entitlement is most commonly used in the context of a sandbox, and to a lesser degree for an App ID. Regardless of the location, an entitlement is a piece of configuration information included in your app’s code signature—telling the system to allow your app to access certain resources or perform certain operations. In effect, an entitlement extends the sandbox and capabilities of your app to allow a particular operation to occur.
You set some entitlements for an App ID in Member Center—for example, by enabling certain technologies and services—and others in the Xcode project. The technologies enabled for an App ID serve as a white list of the technologies one or more apps may use. Some technologies are enabled by default for an explicit App ID. The Xcode project configuration specifies which technologies the app actually uses.
Developer profile
A file that contains a developer’s development certificates, distribution certificates, and provisioning profiles.
Development certificate
A type of signing certificate used during development that identifies a
single developer on a team.
It allows
an app to launch on a device through Xcode.
Development provisioning profile
A typeof provisioning profile that authorizes an app to use certain
technologies and run on designated devices during development.
This profile consists of a name, multiple development
certificates, multiple devices, and an App ID.
Your Signing Certificates in Depth
Your code signing identities, stored in your keychain, represent your iOS and Mac program development and distribution credentials. You should be familiar with the names of these certificates, because they appear in menus, and the types of certificates, because they appear in lists, so that you don’t accidentally remove them from your keychain or Member Center.
There are different types of signing certificates for different purposes. Development certificates identify a person on your team and are used to run an app on a device. During development and testing, you’re required to sign all iOS apps that run on devices and Mac apps that use certain technologies like iCloud and Game Center.
Distribution certificates identify the team and are used to submit your app to the store or for a Mac app, distribute it outside of the store. If you’re a company, distribution certificates can be shared by team members who have permission to submit your app. There are multiple kinds of distribution certificates, each associated with a specific method of distribution. Different code signing identities are also used for iOS and Mac apps.
Signing certificates are issued and authorized by Apple. You must have the intermediate certificate provided by Apple installed in your system keychain to use your certificate; otherwise, it’s invalid. The intermediate certificates provided by Apple and installed by Xcode are:
原文：http://www.cnblogs.com/ioriwellings/p/3628672.html