New answers tagged

0 votes

Is there a tool for auditing my root certificates?

To my opinion your best shot would be to look at forward proxies that provides TLS interception and inspection. XDR solutions often feature such functionalities as well. Seen that the proxy has to ...
bsaverino's user avatar
  • 153
1 vote

How to feasibly digital sign high volume documents with CA issued digital certificate?

First, a quick review how digital signing works. The signer has a key pair consisting of a private key and a corresponding public key. The signer uses the private key to sign a document. Then, the ...
mti2935's user avatar
  • 22.7k
0 votes

Is there a tool for auditing my root certificates?

According to this Wikipedia article, a study of the Alexa top 10 million web sites done in April 2023 found that the issuing CA's of the certificates used to secure these sites breaks down as follows: ...
mti2935's user avatar
  • 22.7k
0 votes

What happens to the key pair once the CSR has been enrolled?

Your diagram is wrong in several ways. First: "Signing" and "encrypting with the private key" are NOT the same thing. As a detail of the RSA algorithm, signing is mathematically ...
bartonjs's user avatar
  • 1,853
1 vote
Accepted

What happens to the key pair once the CSR has been enrolled?

The CSR isn't encrypted generally. If it's an RFC 2986 Certification Request (otherwise known as PKCS#10), then it will be signed by your private key as part of the proof of possession for that ...
garethTheRed's user avatar
  • 1,569
0 votes
Accepted

What happens at a low level when authenticating server certificates?

Regarding the TLS 1.3 Handshake Protocol: What you ask is not specific to TLS 1.3. Certificate validation is used for all the other TLS versions too and is also used outside of TLS, for example in S/...
Steffen Ullrich's user avatar

Top 50 recent answers are included