this essentially means that when a new Certification Authority wants a certificate to authenticate it's trust, or to provide the customers about it's surety about it's trust, it will be acquiring a certificate from another Certification Authority. So there comes a hierarchy.
Note: The issuer and signer of a certification is known as the Certification Authority.
As an example:
Suppose a new Certification Authority (CA) wants a certificate from another CA, it obtains the same by submitting proper details.
Let the CA which is obtaining a Certificate is denoted by CA-New, and the one which is providing the certificate be CA-Old.
The hierarchy will be
CA-Old
¦
--- CA-New
So if a customer trust the CA of the CA-Old, as the CA-New is with a certificate from the former, it can also be trusted.
No comments:
Post a Comment