Certificates Overview

Certificates

• Digital handshake between browser and website's server verifies identities.
• Security certificates:
  • Verify identity of websites.
  • Enable encrypted connection.
  • Act as ID cards for websites.

Certificate Authority (CA)

• Issues security certificates as a guarantee that a public key belongs to a specific organization.
• Most websites obtain certificates from a CA:
  • CAs investigate websites before issuing certificates.

Certificate Validation

• Browser checks the following for certificates:
  • Is it from a trusted CA? (Self-signed certificates are less secure.)
  • Is the certificate still valid (not expired)?
• Expired certificates may signify outdated verification, threatening security.

Viewing Certificates

• Access a website's certificate by clicking the lock icon in the address bar:
  • Check issuer, issue date, expiry date, and confirm correct website issued the certificate.