What is an SSL Certificate?
It is a certificate that can be verified as coming from a trusted source. They also come with an encryption key pair, or a public and a private key, just like PGP and GPG used for emails and other encryption needs.
How is the SSL certificate used?
-
Browser connects to a website that is secured with SSL. Browser requests that the server identify itself.
-
Server sends a copy of its SSL Certificate, including the server’s public key.
-
Browser checks the certificate root against a list of trusted CAs that it is valid for the website that it is connecting to. If trustworthy it creates, encrypts, and sends back a symmetric session key using the server’s public key.
-
Server decrypts the symmetric session key using its private key and sends back an acknowledgement encrypted with the session key to start the encrypted session.
-
Server and Browser now encrypt all transmitted data with the session key.
You can get more info 👉 here.
#SSLCertificate #WhatIsSSLCertificate #Security #Privacy