-
A digital certificate, also known as a public key certificate, is used to cryptographically link ownership of a public key with the entity that owns it.
-
A digital certification include the public key being certified, identifying information about the entity that owns the public key, metadata relating to the digital certificate and a digital signature of the public key created by the issuer of the certificate.
Public key cryptography depends on key pairs: one a private key to be held by the owner and used for signing and decrypting, and one a public key that can be used for encryption of data sent to the public key owner or authentication of the certificate holderās signed data.
In short, the digital certificate enables entities to share their public key in a way that can be authenticated.
-
Domain Validated (DV SSL) certificates, Organization Validated (OV SSL) certificates, Extended Validation (EV SSL) certificates, Code signing certificates and Client certificates.
-
CAs are considered trusted third parties in the context of a PKI; using a trusted third party to issue digital certificates enables individuals to extend their trust in the CA to the trustworthiness of the digital certificates that it issues.