From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Using digital certificates

Using digital certificates

- In this lesson, we're going to discuss three main types of digital certificate usage, client and server authentication, digital signatures, and code signing. Now first we have client and server authentication. Client authentication refers to the mechanism that a server can use to verify if a connection request is coming from a pre-authorized endpoint. Normally, this is done using network access control or NAC for authentication. Server authentication, on the other hand, refers to the mechanism used by a client device to verify that a server is genuine and not a forgery. Every time your web browser attempts to connect to a website over HTTPS, it's using a digital certificate to validate the server is genuine and who they claim to be. Whether you're doing client or server authentication, the process is pretty similar and it relies on a digital certificate to prove the identity of the requester through PKI. Under PKI, anyone can access the public key, but only the authorized user…

Contents