You get a certificate from a recognized Certificate authority (CA) just like you get a passport from a passport office.Įvery time you visit a website that starts with HTTPS, you’re using a certificate authority. Now next query comes to our mind is what is this certificate authority and how server get the certificate from trusted certificate authority:

The digital signature of the certificate-issuing authority.

A copy of the certificate holder's public key.

The certificate's serial number and expiration date.

A passport established a link between a photo and a person, and that link has been verified by a trusted authority (passport office).Ī certificate provides a link between a public key and an entity (business, domain name etc) that has been verified ( signed) by a trusted third party (A certificate authority)Ī certificate provides a convenient way of distributing trusted public encryption keys.Ī certificate contains the following information:

How do you know that it does belong to your bank? The answer is to “ Use A Certificate”.Ī certificate serves the same purpose as a passport does in everyday life. How do you know that a particular public key belongs to the person/entity that it claims to be? For example, you receive a key claiming to belong to your bank. Now there is a question of trust, specifically for public key: Private key is specific to entity and remains intact. Public keys can be made available to anyone, hence the term public. SSL/TLS use public and private key system for data encryption and data Integrity. The purpose of SSL/TLS provides data encryption, data integrity and authentication so that there should be secure communication between client and server.Īn SSL certificate is a digital certificate issued by trusted third party to authenticates a website's/server identity and enables an encrypted connection between client and server.

Every time you visit a website that starts with HTTPS, you can experience that the SSL handshake process which happened at the backend and in the Browser, you can see a padlock icon which confirm about secure connection with the help of certificate.

Checkpoint ssl client