#23unit 1technology solutions

Digital certificate

Verifiable digital identity issued by a CA.

3D Learning World

Interactive Visualizations

Topic Diagrams

Digital certificates and the PKI

CAs issue digital certificates; PKI is the system of CAs and procedures accepted by all parties.

requests certificationissues certificatesigns digest with CA private keypresents to userverifies identity (https lock)Certification…Trusted third par…Digital certi…Issued by CASubject (e.g.…Public key + iden…Signed certif…CA signs digest w…User / BrowserVerifies via CA's…

A digital certificate is issued by a trusted third party called a certification authority (CA). The subject (e.g., Amazon) generates a public/private key pair and requests certification. The CA verifies the information and issues a certificate containing the subject's public key and identifying information. The CA signs a hash digest of the certificate with its own private key, producing the signed certificate. When a user visits a secure site, the browser verifies the CA's signature using the CA's public key; if valid, the https lock icon appears.

Explanation: A digital certificate is issued by a trusted third party called a certification authority (CA). The subject (e.g., Amazon) generates a public/private key pair and requests certification. The CA verifies the information and issues a certificate containing the subject's public key and identifying information. The CA signs a hash digest of the certificate with its own private key, producing the signed certificate. When a user visits a secure site, the browser verifies the CA's signature using the CA's public key; if valid, the https lock icon appears.