Changes

Digital certificates can be used to establish secure connections and authenticate the identity of the certificate holder (Server), such as a website, device, or individual. The Trusted root CA's certificate is pre-installed in most of the operating systems, browsers and devices, so that the users can trust the certificate issued by the trusted root CA as it is from a trusted source.

Digital certificates can be used to establish secure connections and authenticate the identity of the certificate holder (Server), such as a website, device, or individual. The Trusted root CA's certificate is pre-installed in most of the operating systems, browsers and devices, so that the users can trust the certificate issued by the trusted root CA as it is from a trusted source.

== Single Root CA ==

== Single Root CA ("one-tier hierarchy") ==

There are several disadvantages of supporting only one root certificate authority (CA) for your organization:

There are several disadvantages of supporting only one root certificate authority (CA)<ref>https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn786436(v=ws.11) </ref> for your organization:

# Single point of failure: If the one root CA that you are relying on experiences an outage or is compromised, it can leave your organization's systems and networks vulnerable to attack.

# Single point of failure: If the one root CA that you are relying on experiences an outage or is compromised, it can leave your organization's systems and networks vulnerable to attack.

# Limited trust options: By only supporting one root CA, you are limiting the set of trusted parties that your organization can communicate with, which can be a disadvantage in certain situations.

# Limited trust options: By only supporting one root CA, you are limiting the set of trusted parties that your organization can communicate with, which can be a disadvantage in certain situations.