Public Key Infrastructure (PKI) has been considered to be an enabler of secure communication, while, due to its complex and centralized design, there have been instances in the past for Certification Authority's (CA) misbehaving and publishing rogue certificates for targeted attacks. This research aims to present a blockchain-based mechanism that lays down a concrete foundation for creating a transparent and secure block-chain-based mechanism for the issuance and management of digital certificates that enables prevention against CA misbehaving. A prototype is deployed and tested on the Ethereum test network, and the results are made publicly available for verification and validation. As a result, the proposed Ethereum blockchain-based PKI mechanism enables secure, transparent, and auditable issuance and management of digital certificates together with the solution of Sybil, Spoofing, and Man-in-the-Middle (MITM) attacks.

中文翻译：

---

基于区块链的公钥基础设施：一种用于安全通信的透明数字认证机制

公钥基础设施 (PKI) 被认为是安全通信的推动者，但由于其复杂和集中的设计，过去曾出现过证书颁发机构 (CA) 行为不当和发布恶意证书以进行针对性攻击的实例。本研究旨在提出一种基于区块链的机制，该机制为创建透明且安全的基于区块链的数字证书颁发和管理机制奠定了具体基础，以防止 CA 的不当行为。在以太坊测试网络上部署和测试原型，并将结果公开以供验证和验证。因此，提议的基于以太坊区块链的 PKI 机制能够实现安全、透明、