I am trying to understand how
certificates works in
cryptography. I have seen in my browser that is has a list of trusted certificates already. For example, when I want to connect with a secure server, I'll receive a server certificate during handshake comprising its public key and signature. As far I understood, browser uses
CA's public key to decrypt the signatures of server certificate and then compare the hash of the contents. if it matches, certificate is considered legitimate. Now the questions is;
Q: If browser uses public key of CA, why does It keep complete certificate? and how browser decrypt key from CA certificate? isn't encrypted?