Certification authority: Difference between revisions
Jump to navigation
Jump to search
imported>Howard C. Berkowitz No edit summary |
imported>Howard C. Berkowitz mNo edit summary |
||
| Line 2: | Line 2: | ||
In computer and communications security dependent on [[public key infrastructure]] (PKI), a '''certification authority (CA)''' is an organization, verifiably within that infrastructure, that has the administrative right and technical capablility to issue [[digital certificate]]s. It may delegate some of its management functions to a '''registration authority (RA)'''. The CA, however, is the root of all trees of trust for certificates traceable to it. | In computer and communications security dependent on [[public key infrastructure]] (PKI), a '''certification authority (CA)''' is an organization, verifiably within that infrastructure, that has the administrative right and technical capablility to issue [[digital certificate]]s. It may delegate some of its management functions to a '''registration authority (RA)'''. The CA, however, is the root of all trees of trust for certificates traceable to it. | ||
CAs may serve as a repository of certificates and certificate revocations. CAs may revoke certificates, making them a [[ | CAs may serve as a repository of certificates and certificate revocations. CAs may revoke certificates, making them a [[certificate revocation list]] issuer. | ||
Revision as of 18:59, 3 October 2008
In computer and communications security dependent on public key infrastructure (PKI), a certification authority (CA) is an organization, verifiably within that infrastructure, that has the administrative right and technical capablility to issue digital certificates. It may delegate some of its management functions to a registration authority (RA). The CA, however, is the root of all trees of trust for certificates traceable to it.
CAs may serve as a repository of certificates and certificate revocations. CAs may revoke certificates, making them a certificate revocation list issuer.