From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Certificate authorities

Certificate authorities

You already know that certificate authorities are the trusted organizations that issue digital certificates to individuals, systems, and organizations. Just to quickly recap. When someone wants to obtain a digital certificate, they prepare a certificate signing request and provide it to a certificate authority along with proof of their identity. The certificate authority verifies the certificate subject's identity, creates a digital certificate, signs the certificate with their private key, and then sends that signed certificate back to the requester. Anyone wishing to use the certificate may then validate that it's authentic by verifying the digital signature with the certificate authority's public key. If the signature is valid and they trust the certificate authority, they can then trust that it contains a public key belonging to the certificate subject. In most cases, organizations choose to use a well-known certificate authority because the vast majority of users around the world…

Contents