What are certificates?

Certificates are used to prove identity and used for creating secure communication. Check out http://itfreetraining.com for more of our always free training videos. This video looks at how a certificate works, what is a certificate and how they are used for identification and secure communication.

Download the PDF handout
http://itfreetraining.com/Handouts/Ce...

What is a certificate?
A certificate is an electronic document that contains data fields. When compared to a traditional paper certificate there are some similarities between an electronic certificate and a physical certificate. Digital certificates like a physical certificate are issued by an authority. For example, a university may issue a certificate to a student to show that they have completed the necessary work in order to graduate. The next question is, would you trust a physically certificate? Digital certificates work the same way. They are issued from an authority and the question becomes would you trust the authority that issued the certificate? Electronic certificates also contain other fields like who or what the certificate was issued to, how long it is valid, the public key and the digital signature. If a digital certificate is presented to a user or computer, the user or computer is able to check the certificate to ensure the person using it should be using it. Also the certificate contains a digital signature which allows the certificate to be checked to make sure it has not been modified.

Digital Signature
A digital signature provides a method for a certificate to be checked to ensure it has not been modified. In order to do this, a hash value is created for the certificate. To generate a hash value the certificate is put through a function to create a single value. Hash functions are designed so different certificates will not produce the same value, however the hash value cannot be used to generate the original certificate. The same principal applies to a person's fingerprints. They can be used to identify a person, however using a finger print you could not work out the features of a person like what color hair they have. When a certificate is created, the hash value for that certificate is also created. Using a function involving the private key, a digital signature is created and added to the certificate.

Digital Signature Example
When a certificate is used, in order to check the certificate has not been changed, the following is done: The computer generates the hash value for the certificate. Next, the digital signature is put through a function using the public key which should result in the same hash value. If both values match, the certificate has not been modified. This prevents a 3rd party taking a certificate, changing the values in the certificate and using the certificate.

Trust Model
Certificates work off a trust model. An example of a trust model in computers is that a computer may have a sticker on it indicating which operating systems it will run. The consumer, seeing this sticker, must trust that the manufacture would not put this sticker on the laptop unless it will run that operating system. The customer must also trust the creator of that operating system would not allow a computer manufacturer to put a sticker on a computer that would not run that operating system.

Certificate Trust Model
Certificates are generally deployed in a hierarchy. At the top is the root certificate authority. This can be an internal Certificate Authority or an external authority like VeriSign. When an authority like VeriSign issues a certificate, they will perform a number of checks on the individual purchasing the certificate to ensure that they are a valid business. When a certificate is used it can be checked to see which authority issued that certificate. In order for the certificate to be used, the computer must trust the authority that it was issued from. Authorities like VeriSign are trusted by default on most operating systems.

Certificate Error
If a certificate is presented to the computer and it is not trusted, the computer will generate an error asking if the users want to trust the certificate. It is up to the user to decide if they believe the certificate is valid.

Certificate Hierarchy
Certificates use a hierarchy. At the top is the root CA, below these are subordinate CA's. Any level can issue certificates to subordinate CA's or direct to users, computers or devices. If the user, computer or device trusts the root CA, then any certificate that is issued by any CA in the hierarchy will automatically be trusted and thus used by the client.

References
"MCTS 70-640 Configuring Windows Server 2008 Active Directory Second edition" pg 771-775
"Public key certificate" http://en.wikipedia.org/wiki/Public_k...

1. certificates of deposit, certificates online, certificates of deposit rates, certificates of appreciation, certificates of deposit definition, certificates of completion, certificates of participation, certificates templates, certificates for kids, certificates of insurance, certificates uw madison, certificates definition, certificates of occupancy, certificates for students, certificates to print, certificates templates free, certificateservicesclient-autoenrollment, certificates of authenticity, certificates vs degrees, certificates now, digital signatures are legally binding, digital signatures are often used to provide, digital signatures in adobe, digital signatures are used to do which of the following, digital signatures in word, digital signatures cryptography, digital signatures explained, digital signatures and certificates, digital signatures on pdf, digital signatures provide which of the following, digital signatures provide, digital signatures act, digital signatures office 365, digital signatures in outlook, digital signatures vs electronic signatures, digital signatures for pdf documents itext, digital signatures tab missing, digital signatures for dummies, digital signatures bluebeam, digital signatures blockchain, itfreetraining youtube, itfreetraining active directory, itfreetraining adfs, itfreetraining dns, itfreetraining 70-410, itfreetraining windows server 2016, itfreetraining windows server 2012, itfreetraining vmware, itfreetraining 70-640, itfreetraining powershell, itfreetraining windows 7, itfreetraining windows 10, itfreetraining hyper v, itfreetraining group policy, itfreetraining groups, itfreetraining dfs, itfreetraining sccm, itfreetraining certificate, itfreetraining linux, itfreetraining 70-411, public key certificate explained, public key certificate generation, public key certificate chain, public key certificate pdf, public key certificate extension, public key certificate authority, public key certificate video, public key certificate picture, public key certificate file, public key certificate korea, public key certificate file extension, public key certificate tutorial, public key certificate verification, public key certificate pinning, public key certificate formats, public key certificate letsencrypt, public key certificate openssl, public key certificate definition, public key certificate validation, public key certificate difference, microsoft windows operating system, microsoft windows operating system essentials pdf, microsoft windows operating system download, microsoft windows operating system list, microsoft windows operating system versions, microsoft windows operating system startup, microsoft windows operating system the event log file is full, microsoft windows operating system essentials, microsoft windows operating system continues to dominate the market, microsoft windows operating system history, microsoft windows operating system features, microsoft windows operating system pdf, microsoft windows operating system fundamentals pdf, microsoft windows operating system definition, microsoft windows operating system fundamentals, microsoft windows operating system has stopped working, microsoft windows operating system tutorial, microsoft windows operating system ppt, microsoft windows operating system is not responding, microsoft windows operating systems (9x nt 2000 xp), windows server operating system, windows server operating system list, windows server operating system management pack, windows server operating system features, windows server operating system download, windows server operating system support lifecycle, windows server operating system interview questions, windows server operating systems end of life, windows server operating system version numbers, windows server operating system price, windows server operating system price in india, windows server operating system lifecycle, windows server operating systems tutorial, windows server operating system 2016, windows server operating system market share, windows server operating system reports, windows server operating system pdf, windows server operating system not found, windows server operating system build numbers, windows server operating system architecture, information technology, information commissioner, information literacy, information synonym, information systems, information security, information ratio, information now, information processing theory, information is beautiful, information theory, information architecture, information about mahatma gandhi, information management system, information about train, information on an inmate, information right act, information about land, information freedom act, information about flight

What are certificates?
442,480 views views	followers
2,626 Likes	2,626 Dislikes
Education	Upload TimePublished on 18 Jun 2013