Public key infrastructure based on the public certificates ledger

A system for secure and anonymous transactions between one or more entities in a computer network, comprising:

• a plurality of computing devices in the computing network, each of the plurality of computing devices being associated with at least one of the one or more entities;
• at least one public ledger certificates server operatively connected to the plurality of computing devices, wherein the at least one public ledger certificates server is operable to maintain a BIX Certificates Ledger comprising a plurality of cryptographically encapsulated certificate objects representative of verified identities corresponding to the one or more entities, wherein privacy and anonymity of the one or more entities is protected by implementation of the cryptographically encapsulated certificate objects, and wherein each cryptographically encapsulated certificate object in the plurality of cryptographically encapsulated certificate objects comprises:
• a Header set of attributes for identifying the cryptographically encapsulated certificate object in the at least one public ledger certificates server;
• a Subject set of attributes for identifying an owner entity of the cryptographically encapsulated certificate object, wherein the Subject set of attributes comprises a Subject time and date representative of a time and date corresponding to creation of a public key and a private key of the cryptographically encapsulated certificate object owner;
• a Subject digital signature comprising a digital signature over the Subject set of attributes via the private key of the cryptographically encapsulated certificate object owner;
• an Issuer set of attributes for indicating a particular issuing entity from the one or more entities;
• an Issuer digital signature comprising a digital signature over the Issuer set of attributes via a private key associated with the particular issuing system entity;
• a Backward Cross Signature attribute for cryptographically indicating a previously cryptographically encapsulated certificate object in the BIX Certificates Ledger;
• a Next Subject set of attributes for indicating a particular cryptographically digitally signed certificate object of a Next Subject entity in the BIX Certificates Ledger, the Next Subject entity included in the group of the one or more system entities;
• a Next Subject digital signature comprising a digital signature over the Next Subject set of attributes via a private key associated with a subsequent cryptographically encapsulated certificate object in the BIX Certificates Ledger;
• and
• a Forward Cross Signature attribute indicating the subsequent cryptographically encapsulated certificate object.