What are certificates?

Certificates are used to prove identity and used for creating secure communication. Check out itfreetraining.com for more of our always free training videos. This video looks at how a certificate works, what is a certificate and how they are used for identification and secure communication.
Download the PDF handout
itfreetraining.com/handouts/ce...
What is a certificate?
A certificate is an electronic document that contains data fields. When compared to a traditional paper certificate there are some similarities between an electronic certificate and a physical certificate. Digital certificates like a physical certificate are issued by an authority. For example, a university may issue a certificate to a student to show that they have completed the necessary work in order to graduate. The next question is, would you trust a physically certificate? Digital certificates work the same way. They are issued from an authority and the question becomes would you trust the authority that issued the certificate? Electronic certificates also contain other fields like who or what the certificate was issued to, how long it is valid, the public key and the digital signature. If a digital certificate is presented to a user or computer, the user or computer is able to check the certificate to ensure the person using it should be using it. Also the certificate contains a digital signature which allows the certificate to be checked to make sure it has not been modified.
Digital Signature
A digital signature provides a method for a certificate to be checked to ensure it has not been modified. In order to do this, a hash value is created for the certificate. To generate a hash value the certificate is put through a function to create a single value. Hash functions are designed so different certificates will not produce the same value, however the hash value cannot be used to generate the original certificate. The same principal applies to a person's fingerprints. They can be used to identify a person, however using a finger print you could not work out the features of a person like what color hair they have. When a certificate is created, the hash value for that certificate is also created. Using a function involving the private key, a digital signature is created and added to the certificate.
Digital Signature Example
When a certificate is used, in order to check the certificate has not been changed, the following is done: The computer generates the hash value for the certificate. Next, the digital signature is put through a function using the public key which should result in the same hash value. If both values match, the certificate has not been modified. This prevents a 3rd party taking a certificate, changing the values in the certificate and using the certificate.
Trust Model
Certificates work off a trust model. An example of a trust model in computers is that a computer may have a sticker on it indicating which operating systems it will run. The consumer, seeing this sticker, must trust that the manufacture would not put this sticker on the laptop unless it will run that operating system. The customer must also trust the creator of that operating system would not allow a computer manufacturer to put a sticker on a computer that would not run that operating system.
Certificate Trust Model
Certificates are generally deployed in a hierarchy. At the top is the root certificate authority. This can be an internal Certificate Authority or an external authority like VeriSign. When an authority like VeriSign issues a certificate, they will perform a number of checks on the individual purchasing the certificate to ensure that they are a valid business. When a certificate is used it can be checked to see which authority issued that certificate. In order for the certificate to be used, the computer must trust the authority that it was issued from. Authorities like VeriSign are trusted by default on most operating systems.
Certificate Error
If a certificate is presented to the computer and it is not trusted, the computer will generate an error asking if the users want to trust the certificate. It is up to the user to decide if they believe the certificate is valid.
Certificate Hierarchy
Certificates use a hierarchy. At the top is the root CA, below these are subordinate CA's. Any level can issue certificates to subordinate CA's or direct to users, computers or devices. If the user, computer or device trusts the root CA, then any certificate that is issued by any CA in the hierarchy will automatically be trusted and thus used by the client.
References
"MCTS 70-640 Configuring Windows Server 2008 Active Directory Second edition" pg 771-775
"Public key certificate" en.wikipedia.org/wiki/Public_k...

[@bjornarmar2462]

Clearest explanation I’ve ever seen.
Still twists my brain into a knot.

[@kiwinesss]

Same here. It doesn't matter how simply it is explained it is difficult to wrap your head around it :)

[@saltycasual4594]

Ah yes, glad i'm not alone

[@Coballes19]

I gotta say...
I've been through some websites and videos trying to explain certificates.
But this is the one video that explains it the most simplest and well-understandable manner.

[@itfreetraining]

Coballes19 Thanks very much, we're glad you found or videos helpful

[@RyanxDunn]

I know I'm 5 years late, but if you want simple and understandable, another person to look into is Sunny's Classroom. I haven't checked his video on certificates yet, but everything I've watched from him has clarified my confusion immensely, and his comments section is full of people saying the same thing. Just so that you have another source to go to for good informative videos :)

[@jjaroc86]

Love the training series. It's really taken everything and put it into baby steps so that anyone, even if they aren't particulary from the IT field, can easily understand these concepts. This goes for all of your videos, I love watching them all.

[@itfreetraining]

jjaroc86 Thank you, Happy to hear you enjoyed our video

[@kevingrace5285]

I love when stuff is simplified. You can give me more complicated perhaps real life scenarios but make it simple at first. Thank you!

[@itfreetraining]

You're most welcome! Thanks for watching.

[@justsomeguy7926]

That was wonderful! Thanks, for making it so clear and linking it to real life examples! Keep up the good work!

[@jnelly3426]

Thank you. This was really good, even 9yrs later

[@itfreetraining]

Glad you enjoyed it!

[@itfreetraining]

Thanks for disabling adblock, but there is no need to click on the ads, unless you are interested in the product. Glad you like the videos.

[@vanaver]

Excellent vid! After several days of trying to "get" this stuff, this is by far the best explanation out there.

[@itfreetraining]

+Raf Van Haver we're glad you found the videos useful and informative!

[@sumitamazumder5823]

Great Video by IT Free training. Cheers to you guys. The demonstration is awesome.

[@dauculajava]

Thanks you a lot. It's too good for a free training vid

[@itfreetraining]

Thank you, we're glad you found the video helpful

[@jakobfredriksson2272]

My god it took for ever stumble upon an explanation this good. Thanks.

[@itfreetraining]

Glad it was helpful!

[@hangeroo2439]

Loved the examples and visuals you used as it helps someone like me relate and understand so much better!

[@itfreetraining]

We're glad you enjoyed it!

[@tedwoodpeacock4689]

If only all tutorial videos could be this good! Awesome explanation. Thanks.

[@itfreetraining]

You're very welcome!

[@fanaticc]

itfreetraining is making the best educational videos. I got my job thanks to your videos

[@itfreetraining]

+Богдан Захариев Thanks! We couldn't be happier that our videos helped you get a job.

[@kaykann7880]

Wow. I feel much more confident now after watching this video. Thanks ITFreetraining.

[@itfreetest7322]

Thank you, we're glad you found the video helpful!

[@Fealox]

One of the best videos I have seen on certificates. I am pointing my colleagues here if they want to learn more about certificates!

[@itfreetraining]

Thanks for the referrals! Thanks for watching.

[@imosbee9581]

Great video!!! Clear explanations.
I have a playlist of videos on SSL (Secure Socket Layer) and this particular videos is among the best on that list.

[@sarahblem5346]

a perfect video !!!! thank you so much you saved me !!!

[@itfreetraining]

You're very welcome! Thanks for watching!

[@lostkarz598]

noelque

[@joshd1732]

That feeling when it finally clicks. Thank you.

[@itfreetraining]

Thanks for watching.

[@karthik14141]

Thanks for the video. It is crisp, clear and to the point. Great day ahead.

[@itfreetraining]

You're very welcome!

[@AngeloSurfxD]

Very well explained video. Good job!

[@itfreetraining]

Thanks!

[@kookaburra-au]

Thank you, very informative and kept simple to understand.

[@pronounceword]

I like your video very much. It's really great. I'll keep an eye on your channel. I am your fan and I will support you.

[@itfreetraining]

Thanks very much and thanks for adding us to the playlist.

[@MrBoyomo]

Great video, very well explained, Thank you very much.

[@UmarAlFarooq]

Amazing video. You are a wonderful human being.

[@ravi2305]

Amazing introduction of the fundamentals and the concept. Thank you so much

[@itfreetraining]

You're very welcome!

[@yehyamneimne]

One of the best channels , well-explained!

[@itfreetraining]

+Yehya Mnaimneh Thank you very much.

[@aa-ur8wu]

amazingly clearly explained, thank you

[@itfreetraining]

Thanks, glad you liked the video.

[@daDfarSpanTaistheKin]

thanks for the prompt reply
that helps me undertand it for the time being ....

[@bharatvuppala9159]

Thank you! great effort and very clear. Very valuable 15 mins of my day.

[@itfreetraining]

You're very welcome! We're so glad you enjoyed it. Thanks for spending your 15 minutes with ITFreeTraining. ;)

[@NK-iw6rq]

Thank you so much, this video was incredibly insightful !

[@itfreetraining]

Glad it was helpful!

[@itfreetraining]

Thank very much and thanks for watching.

[@fxtrackr]

Great explanation - just what I needed right now to help me understand how this all works. Thank you very much...

[@itfreetraining]

Glad it helped!

[@babuo7682]

Excellent Explanation.... I got your knowledge ..you got my subscription .. :)

[@rak2396450]

Excellent Work.. Very Useful.. Thank you ITFreeTraining team..

[@itfreetraining]

No problem at all, thanks for watching.

[@MindBlower18]

Excellent tutorial!

[@itfreetraining]

Thanks, glad we could help.

[@dhimantr]

perfect explanation which i am looking for

[@itfreetraining]

No problem, thanks for watching.

[@nabeeltaher5534]

you are awesome . thank you very much dude. your video is great .

[@dooglecolslaw5703]

I'm just impressed that you managed to navigate your subtitle settings.

[@itfreetraining]

Thank you!

[@ScoringStageDe]

Best channel ever.

[@itfreetraining]

+ScoringStageDe Thanks!

[@abhayvaidya3532]

Very crisp and clear explanation. Thank you for sharing.

[@itfreetraining]

Thanks for watching.

[@Kusanagi64]

Thank you! Have been using certificates for years now without really knowing how this Trust Model works. Now that I know how it works I can use certificates with more confidence.

[@itfreetraining]

Glad to help!

[@osmaster3327]

Thank you SOOO much. Your explantions are very clear !

[@itfreetraining]

You're most welcome! We're glad our videos helped you.

[@pleih]

Thank you for making this video. Very helpful!

[@itfreetraining]

You're most welcome!

[@rsj9822]

Outstanding tutorial.

[@itfreetraining]

No problem at all, thanks for watching.

[@xzoli8]

It's very good explanation indeed, I have been looking for this a while, thanks a lot :D

[@itfreetraining]

Thank you very much!

[@ameenahmed4u]

That was indeed a great video!!!! Many thanks...

[@itfreetraining]

You're very welcome!

[@trung6589]

very helpful stuff, cant wait for next videos

[@Hariprasathsang]

Amazing Video.. So simple explanation to understand and still the topic relevant to me after these many years.. Thank you very much for this.. Subscribed.! :-)

[@bahaakhateib1979]

All i can say is thank you, you did a great job sir

[@itfreetraining]

+Bahaa Khateib Thank you very much! We strive to provide the best IT training videos for free so we're more than happy to hear you believe we did a great job.

[@kevinstoneham1245]

Thanks. I have to manage certificates as a licence/sofware manager. It has really helped.

[@itfreetraining]

+Kevin Stoneham Thank you. Happy our video was helpful

[@abhijitkamath6952]

very good video .... explained well !!!! thank you

[@itfreetraining]

Glad it was helpful!

[@itfreetraining]

Thanks very much and thanks for subscribing.

[@smailasma3491]

I love the way you explain it. Thanks a lot

[@itfreetraining]

+Smail Asma Great! We love that you enjoy it. You're most welcome, thanks for watching.

[@calabrais]

Exactly what I was looking for!

[@itfreetraining]

Glad we could help.

[@esmatullahsaidy4037]

Thumbs Up, incredible explanation!

[@itfreetraining]

Glad you liked it!

[@shavarshshahoyan]

Awesome video, thank you so much!

[@itfreetraining]

Glad you liked it!

[@itfreetraining]

You're very welcome!

[@pravkum206]

Very helpful video to understand certificates. Thanks.

[@itfreetraining]

You're very welcome!

[@itfreetraining]

You are very welcome!

[@stephenboakye2307]

wow what a great teacher....i really like the scenario u created .is extremely understandable
with this scenario you created

[@itfreetraining]

+Stephen Boakye Thank you!

[@AD-qd7ps]

Brilliant! Great 15min video!

[@itfreetraining]

Thanks very much.

[@zomgoose]

Excellent explanation!

[@itfreetraining]

Glad it was helpful!

[@RaMsOc2]

thx for being free :) ...ive just disabled the adblock from your videos and website ...
and im clicking on them too... hope it helps you :)

[@itfreetraining]

Thank You Anton

[@tejeswipydi2641]

Thank you for great explanation.

[@itfreetraining]

Glad it was helpful!

[@ukbakrol]

wonderful explanation!!!

[@itfreetraining]

Glad you think so!

[@Jorge-gz8ff]

I wish people taught more like you.

[@itfreetraining]

Thanks for the kind words! :)

[@xiangyuzhang5890]

Very helpful video, gives me much better understanding now.

[@itfreetraining]

+Xiangyu Zhang We're so glad our videos helped you further understand! Thanks for choosing and watching IT Free Training!

[@AnaximandroAndrade]

Very well Explained..Thank you!!!!

[@itfreetraining]

We're glad you liked it! You're welcome and thanks for watching. ;)

[@sanjibkumar8869]

Very Nice video.Every basic information is caputed perfectly

[@itfreetraining]

Thanks!

[@AnanthaRajuC]

Very Good Tutorial. Thanks!

[@itfreetraining]

Thanks very much.

[@sheldond64]

Thank You. Very informative.

[@aleks5878]

Thank you for a great video. But why didn't you put this one in "certificates" playlist?

[@poobass7]

Excellent work.

[@itfreetraining]

Thanks very much.

[@ziadfawzi]

Thank you very much.

[@alaouchicheabdellah4986]

thank you sir, looking forward to videos like these.

[@itfreetraining]

Thank you!

[@michaelsera746]

Lets see if understood this please. When accessing a web site, your computer downloads the cert from the site and then determines if it can be trusted based on the cert authority or who issues it. If trusted , your computer uses the public key for that domain ? to encrypt. The web server on particular domain can decrypt using the private key. That forms the secure ssl channel. Sound good or not ?

[@itfreetraining]

Thanks Anton

[@seanblake7082]

Thank You for this presentation, its great.

[@itfreetraining]

You're most welcome!

[@anonnewuserp9530]

Hi,
Please give an example where Electronic certificate is issued to User, computer & a device?
Thanks

[@SunilShirurkar]

Hi Thanks for the tutorial, How the Public CA works & any one can go for Public CA.

[@leichnahm]

Thanks for the Video.

[@itfreetraining]

You're most welcome!

[@neel9097]

Nice Video. Thank you !

[@itfreetraining]

Thanks very much.

[@abhisarpatil728]

Got it! Thanks!

[@itfreetraining]

Glad we could help.

[@anilksingh1974]

Thank you very much!!!

[@itfreetraining]

Thanks very much.

[@EddieKumarShrivastava2]

Very nicely explained.

[@itfreetraining]

+Eddie Kumar Shrivastava (Aditya) Thanks! We work hard to give you the best explanations.

[@neerajj1985]

Thanks very much!!

[@rajeshb8519]

Like it a lot. Very well explained

[@itfreetraining]

+itfreetraining Thank you. Glad you found it helpful

[@tttrrrification]

very clear explanation

[@itfreetraining]

Glad you think so!

[@abhijeetnegi6484]

so beautifully explained .
thanksss

[@itfreetraining]

You're very welcome!

[@itfreetraining]

You're Welcome

[@BijouBakson]

Thank you.

[@celiagaylard489]

Very informative, thank you very much.

[@itfreetraining]

You are very welcome! Thanks for watching. :)

[@mikechavez61]

Very helpful.