| Line 1: |
Line 1: |
| − | A trusted root certificate authority (CA) is a third-party organization that issues digital certificates to verify the identity of individuals, organizations, and computer systems. The trusted root CA acts as a trusted third party and is responsible for verifying the identity of the certificate holder (Web server, typically), and issuing a digital certificate that binds the identity of the certificate holder to a public key.
| + | The Trusted root certificate authority (CA) refers to a certificate usually pre-installed in a special folder on most of the operating systems, browsers and devices. This pre-known certificate allows a user's device to trust the certificates from (''and identity of'') individuals, organizations, and computer systems. The CA usually refers to a third-party organization but many organizations host private CAs on their internal network. |
| | | | |
| | == Digital certificates == | | == Digital certificates == |
| − | Digital certificates can be used to establish secure connections and authenticate the identity of the certificate holder (Server), such as a website, device, or individual. The Trusted root CA's certificate is pre-installed in most of the operating systems, browsers and devices, so that the users can trust the certificate issued by the trusted root CA as it is from a trusted source.
| + | A digital certificate is an electronic "ID card" that is issued by a certification authority (CA) and contains information that uniquely identifies the holder, such as their name and address, as well as the digital signature of the CA. A digital certificate typically contains two types of keys: a public key and a private key. The public key is used to encrypt data and verify digital signatures, while the private key is used to decrypt data and create digital signatures. Together, these keys form a key pair, which is used to secure communications and authenticate the identity of the certificate holder. For example, when viewing this page, the website presented to the users device a certificate signed by the "Go Daddy Secure Certificate Authority - G2" which one can verify by clicking the lock icon and locating the certificate path information. One can also find a certificate from this CA pre-installed in the trusted root folder on one's device. |
| | | | |
| − | == Trusted Root Folder == | + | == Trusted Root Folder Advantages == |
| | Advantages to having multiple CAs in the trusted root folder of a PC: | | Advantages to having multiple CAs in the trusted root folder of a PC: |
| | # Flexibility: Having multiple CAs allows a PC to establish secure connections with a variety of different servers and services, which can be useful for connecting to different websites, applications, and networks. | | # Flexibility: Having multiple CAs allows a PC to establish secure connections with a variety of different servers and services, which can be useful for connecting to different websites, applications, and networks. |