An X.509 certificate is a data format that bundles a public key together with some metadata (Server’s DNS name) about the key’s entity. The site operator is the owner of the key. When a client connects to an HTTPS web server, the web server presents its certificate for the client to verify. The client verifies that the certificate has not expired and matches the desired server DNS name.
There is a chain of certificates linking a trust anchor to one or multiple intermediate signers instead of directly signing to a web server certificate for Certificate Authority. X.509 certificates can authenticate the digital identities of any applications or devices. Web browsers verify servers’ TLS or SSL status using X.509 certificates.
Comments
Post a Comment