Digital Certificates Question: Download Digital Certificates PDF
Who Issues Certificates and How?
Answer:
Certificates are issued by a certifying authority (CA), which can be any trusted central administration willing to vouch for the identities of those to whom it issues certificates and their association with a given key. A company may issue certificates to its employees, a university to its students, a town to its citizens. In order to prevent forged certificates, the CA's public key must be trustworthy: a CA must either publicize its public key or provide a certificate from a higher-level CA attesting to the validity of its public key. The latter solution gives rise to hierarchies of CAs. See Figure 14 for an example.
| Previous Question | Next Question |
| How are Certificates Used? | How Do Certifying Authorities Store their Private Keys? |