2 spelling mistake. used 'if' instead of 'of'
| link

Verification ifof client certificates

source | link

Verification if client certificates

I've read a lot of articles about client certificates. Please correct me if I'm wrong:

  1. client certificates are issued using CA
  2. CA could be created by myself (self-signed) or bought
  3. client certificate has pair of public\private key and signature created using private key of CA
  4. client needs to have installed client certificate only
  5. server needs to have installed CA to validate signature of client certificate using public key CA

Question: what is difference between bought CA and self-signed CA? Because as I understand in both cases I need to install CA on server to validate client certificates.