Which entity issues and signs digital certificates?

Which entity issues and signs digital certificates?

• A. Certificate Authority
• B. Certificate Repository
• C. Security Center
• D. Key History

Answer: (A)

In PKI, digital certificates are issued by a Certificate Authority, a trusted third party. The CA verifies the entity’s identity and then issues a certificate that binds the entity’s identity to a public key. It signs this certificate with its private key, creating a signature that others can verify using the CA’s public key. This signature provides trust: as long as you trust the CA, you can trust the certificates it signs. There can be a chain of trust with root and intermediate CAs. A certificate repository simply stores certificates for retrieval; it does not issue or sign them. Security Center and Key History aren’t the entities responsible for issuing or signing digital certificates.

In PKI, digital certificates are issued by a Certificate Authority, a trusted third party. The CA verifies the entity’s identity and then issues a certificate that binds the entity’s identity to a public key. It signs this certificate with its private key, creating a signature that others can verify using the CA’s public key. This signature provides trust: as long as you trust the CA, you can trust the certificates it signs. There can be a chain of trust with root and intermediate CAs.

A certificate repository simply stores certificates for retrieval; it does not issue or sign them. Security Center and Key History aren’t the entities responsible for issuing or signing digital certificates.