Certificate authorities and trust chains in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a Certificate Authority (CA)?

A Certificate Authority is a trusted organization that issues digital certificates. These certificates verify the identity of websites or entities on the internet, helping users know they are communicating with the right party.

beginner

What is a trust chain in digital certificates?

A trust chain is a sequence of certificates where each certificate is signed by the one above it, starting from a trusted root CA down to the website's certificate. This chain helps browsers verify that a website's certificate is valid and trustworthy.

intermediate

Why do browsers trust certain Certificate Authorities?

Browsers have a list of trusted root CAs built-in. These CAs follow strict rules and security practices. Because browsers trust these root CAs, they also trust certificates issued by them or their intermediaries.

intermediate

What is an intermediate certificate in a trust chain?

An intermediate certificate is issued by a root CA and can issue certificates to other entities. It acts as a middle step in the trust chain, helping to protect the root CA and manage certificate issuance.

beginner

How does a trust chain protect users from fake websites?

The trust chain ensures that only certificates signed by trusted CAs are accepted. If a website's certificate is not part of a valid trust chain, browsers warn users, helping prevent fake or malicious sites from pretending to be real.

What role does a Certificate Authority play in internet security?

A It blocks viruses

B It creates websites

C It issues digital certificates to verify identities

D It stores user passwords

Certificate Authorities issue digital certificates that verify the identity of websites or entities.

What is the first certificate in a trust chain called?

A Intermediate certificate

B Server certificate

C Client certificate

D Root certificate

The root certificate is the trusted starting point of a trust chain.

Why do browsers warn you when a certificate is not trusted?

A Because the certificate is expired

B Because the certificate is not part of a valid trust chain

C Because the website is slow

D Because the website uses too many images

Browsers warn users if the certificate cannot be verified through a trusted chain.

What is the purpose of an intermediate certificate?

A To act as a middle step between root CA and website certificates

B To encrypt emails

C To store user data

D To speed up internet connection

Intermediate certificates help manage certificate issuance and protect the root CA.

Which of these is NOT true about Certificate Authorities?

A They host websites

B They issue digital certificates

C They create trust chains

D They verify identities

Certificate Authorities do not host websites; they issue certificates to verify identities.

Explain what a trust chain is and why it is important for internet security.

Think about how browsers check if a website is safe.

Describe the role of a Certificate Authority and how it helps users trust websites.

Consider who gives websites their 'digital ID cards'.