PKI and digital certificates

3 quick checks≈2% of the testCore

Reading is free. Sign in to tick off lessons, keep your place and track your mastery.

By the end you’ll be able to

Explain PKI components: public and private keys, certificate authorities, root of trust and key escrow
Describe the certificate life cycle: CSR generation, issuance, renewal and revocation through CRLs and OCSP (including OCSP stapling)
Compare self-signed and third-party certificates, wildcard certificates and subject alternative name (SAN) certificates

0% read

Select the certificate solution for a scenario, such as an internal test server, a public site with many subdomains, or code signing

This lesson hasn’t been written yet

Security+ lessons are written from the official syllabus the first time a learner opens them, then saved for everyone. Sign in and this one is written for you in a minute or two. It’s free.

Sign in Create a free account