New answers tagged certificates
0
votes
Is there a tool for auditing my root certificates?
To my opinion your best shot would be to look at forward proxies that provides TLS interception and inspection. XDR solutions often feature such functionalities as well. Seen that the proxy has to ...
1
vote
How to feasibly digital sign high volume documents with CA issued digital certificate?
First, a quick review how digital signing works. The signer has a key pair consisting of a private key and a corresponding public key. The signer uses the private key to sign a document. Then, the ...
0
votes
Is there a tool for auditing my root certificates?
According to this Wikipedia article, a study of the Alexa top 10 million web sites done in April 2023 found that the issuing CA's of the certificates used to secure these sites breaks down as follows:
...
0
votes
What happens to the key pair once the CSR has been enrolled?
Your diagram is wrong in several ways.
First: "Signing" and "encrypting with the private key" are NOT the same thing. As a detail of the RSA algorithm, signing is mathematically ...
1
vote
Accepted
What happens to the key pair once the CSR has been enrolled?
The CSR isn't encrypted generally. If it's an RFC 2986 Certification Request
(otherwise known as PKCS#10), then it will be signed by your private key as part of the proof of possession for that ...
0
votes
Accepted
What happens at a low level when authenticating server certificates?
Regarding the TLS 1.3 Handshake Protocol:
What you ask is not specific to TLS 1.3. Certificate validation is used for all the other TLS versions too and is also used outside of TLS, for example in S/...
Top 50 recent answers are included
Related Tags
certificates × 2855tls × 1282
certificate-authority × 826
public-key-infrastructure × 490
openssl × 287
x.509 × 244
authentication × 196
man-in-the-middle × 157
encryption × 148
digital-signature × 145
windows × 104
cryptography × 102
certificate-revocation × 101
web-browser × 97
http × 49
chrome × 44
rsa × 42
trust × 40
android × 39
vpn × 39
java × 38
letsencrypt × 38
network × 37
proxy × 37
code-signing × 37