The present invention enforces digital rights within the confines of a content license by validating an entity certificate. Cryptographic information within a entity certificate is utilized to unlock protected content and authenticate the entity certificate. The entity certificate includes personal credentials, which have information that the entity is unwilling or uncomfortable to share publicly. For example, the personal credentials may include private information, or information associated with a personal object that cannot consume the protected content, or both.