Certificate authorities and trust chains in Cybersecurity - Mini Project: Build & Apply

Understanding Certificate Authorities and Trust Chains

📖 Scenario: You are learning how secure websites prove their identity using certificates. These certificates are issued by trusted organizations called Certificate Authorities (CAs). To understand how trust works on the internet, you will build a simple model of a trust chain.

🎯 Goal: Build a simple representation of a certificate trust chain using a dictionary. This will help you understand how certificates link from a website to a trusted root authority.

📋 What You'll Learn

Create a dictionary representing certificates and their issuers

Add a variable to represent the trusted root certificate

Write a loop to trace the trust chain from a website certificate up to the root

Add a final step to confirm the chain ends at the trusted root

💡 Why This Matters

🌍 Real World

Understanding certificate authorities and trust chains helps you know how secure websites prove their identity and how browsers decide to trust them.

💼 Career

This knowledge is essential for cybersecurity roles, network administrators, and anyone working with secure communications or web security.

1

Create the certificate dictionary

Create a dictionary called certificates with these exact entries: 'WebsiteCert': 'IntermediateCA', 'IntermediateCA': 'RootCA', 'RootCA': null. This shows which certificate issued which.

Cybersecurity

# Create the certificates dictionary with exact entries
# Your code here

Need a hint?

Think of the dictionary keys as certificates and the values as the certificate that issued them.

2

Set the trusted root certificate

Add a variable called trusted_root and set it to the string 'RootCA'. This represents the root certificate your system trusts.

Cybersecurity

certificates = {
    'WebsiteCert': 'IntermediateCA',
    'IntermediateCA': 'RootCA',
    'RootCA': None
}
# Set the trusted root certificate
# Your code here

Need a hint?

The trusted root is the final certificate that your system accepts as secure.

3

Trace the trust chain

Write a while loop using a variable current_cert starting at 'WebsiteCert'. In each loop, update current_cert to its issuer from certificates. Stop the loop when current_cert is null.

Cybersecurity

certificates = {
    'WebsiteCert': 'IntermediateCA',
    'IntermediateCA': 'RootCA',
    'RootCA': None
}
trusted_root = 'RootCA'

# Trace the trust chain from WebsiteCert to root
# Your code here

Need a hint?

Use the dictionary to find who issued the current certificate and update current_cert until you reach the root.

4

Confirm the chain ends at the trusted root

After the loop, add a variable chain_valid and set it to true if the last certificate before null was trusted_root, otherwise false. This confirms the trust chain ends at the trusted root.

Cybersecurity

certificates = {
    'WebsiteCert': 'IntermediateCA',
    'IntermediateCA': 'RootCA',
    'RootCA': None
}
trusted_root = 'RootCA'

current_cert = 'WebsiteCert'
while current_cert is not None:
    current_cert = certificates[current_cert]

# Confirm if the chain ends at the trusted root
# Your code here

Need a hint?

Keep track of the last certificate before null to check if it matches the trusted root.