Certificates 1.4 Flashcards
A […] binds a public key with a digital signature
Kinda like a ID card for someone
Digital Certificate
[…] is the standard format for a digital certificate
X.509
The […] is an inherently trusted component.
- HSM
- Secure Enclave
- Certificate Authority
Root of Trust
If you can trust the […], you can trust the website, as it has digitally signed the website certificate.
Usually built into the browser.
Certificate Authority
You might use a […] when your company and it’s users will be the only one using it
“No need to purchase trust for devices that already trust you”
Self Signed Certificate
A wildcard certificate, or […], allows a certificate to support many different sub domains.
As long as a device is associated with that domain name, the certificate will be valid
Ex:
Google.com
Mail.Google.com
Finance.Google.com
Subject Alternating Name (SAN)
The […], maintained by the Certificate Authority, is a list of the certificates that have been revoked.
Certification Revocation List
[…] allows a website to supply its validation of its certificate directly to your browser, instead of contacting a 3rd party CA.
The website will periodically fetches a validation response from the CA and attaches it to its SSL/TLS certificate
OCSP Stapling
(Online Certificate Status Protocol)
