Types of Certificates 6.4

Question 1

Root Certificate

Answer 1

The public key certificate that identifies the root CA. The root certificates issues other certificates. Intermediate CA’s come from a root CA. Access to the root CA allows for the creation of any trusted certificate.

Question 2

Web Server SSL Certificates

Answer 2

Domain Validation (DV) Certificates is assigned to a web server for SSL encryption.

Extended Validation (EV) Certificate is assigned to sites that have additional checks verified. The site is awarded a green name to distinguish it.

Question 3

Web Server SSL Certificates Cont.

Answer 3

Web server certificates that support many different domains with one certificate is called a Subject Alternative Name (SAN) certificate. It’s an extension of the X.509 certificate standard. It lists additional identification information.

A Wildcard Domain certificate will apply to all servers associated within a domain. i.e.

Leo.Limitless.com
Jenny.Limitless.com
www.Limitless.com

Could use a Wildcard Domain Certificate

Question 4

Self-Signed Certificates

Answer 4

Internal certificates don’t need to be signed by a public CA. Since no external sources are going to use it, you can create your own CA and use it within your own company. This means you don’t have to purchase trust for devices that already trust you.

Question 5

Machine and Computer Certificates

Answer 5

You have to manage many devices. Often times you’ll never physically see them. In order to trust these devices, you can put an internal certificate on them.

Question 6

User Certificates

Answer 6

You can associate a certificate with a user. This is essentially a powerful electronic “id card”. It can be used as an additional authentication factor. This is commonly integrated onto smart cards used both as physical and a digital access card.

Question 7

Email Certificates

Answer 7

You can use cryptography in an email platform. Email certificates allow us to do that. You use a recipient’s public key to encrypt. Receiver uses their private key to decrypt. Digital signatures allow you to digitally sign an email, and verify the authenticity/integrity of the email.

Question 8

Code Signing Certificate

Answer 8

Developers can provide a level of trust by digitally signing the code they distribute. The users OS will examine the signature to see if anything has changed. If the app doesn’t validate, you can stop the execution of the app and contact the dev.