Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

This question already has an answer here:

If the HTTPS webserver uses self signed certificate, the web browser warns the user as follow.

http://www.sslshopper.com/assets/images/iis7/iis7-self-signed-certificate-8-certificate-not-trusted.png

I am curious how can browser tell if the certificate is self signed or not(in detail). is there any technically detailed document which describes this process?

thank you in advance.

share|improve this question

marked as duplicate by NULLZ, Adnan, GdD, TildalWave, Rory Alsop Nov 20 '13 at 11:00

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

You can find the complete detail in RFC5246.

Put very simple: Every certificate should be signed by a third party. Each third party's certificates are included within your browser. The browser can check if the certificate is signed by a third party it trusts, if it's signed by the same server of which you are demanding to see the identity, then it's considered self signed.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.