Unverified50% confidenceFactExact time
Once attackers obtain the intermediate CA's private key, they can issue TLS certificates for arbitrary domains in that CA's name, and end-user browsers and operating systems typically trust intermediate certificates derived from legitimate root CAs.
1
Sources
50%
Confidence
Long-term
Relevance
10/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAll publicly trusted CAs must submit certificate information to at least one CT log when issuing a certificate, so when a new website applies for an SSL certificate, its domain information appears in the public log.70% similarUnverifiedDomain validation (DV) is the most basic step in certificate issuance, through which a CA confirms that the applicant has actual control over the target domain.69% similarUnverified合格电子签名（QES）要求由受监管的信任服务提供商颁发数字证书，将公钥与真实身份绑定64% similarVerifiedIn the embedded token scenario, the server signs the token with a private key, and the Databricks platform uses the corresponding public key to verify the signature's integrity.64% similarVerifiedTrusted digital identity typically relies on cryptographic signature mechanisms, where creators use a private key to digitally sign content, and anyone can verify the integrity and origin of the content via the public key.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1076805API
curl https://kongchang.com/api/v1/knowledge/claims/1076805MCP
get_claim(id=1076805)