Currently a certificate may optionally include one or more verified eMail addresses, a \&quot;Single Sign On ID\&quot; and (if the User is assured to 50 points) the name. All X509 certificates have to include issuing and expiry dates.