Unverified50% confidenceFactExact time
In the PKI system, root certificates are usually kept offline and rarely issue end-entity certificates directly, while intermediate CAs handle day-to-day issuance duties.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedDocuSeal提供的电子签名通常属于普通或高级级别，通过审计日志和IP记录建立证据链，而非依赖严格的PKI证书体系70% similarUnverifiedDigital signatures are based on public key infrastructure (PKI) and are generated from digital certificates issued by certificate authorities; they can verify the signer's identity and detect whether a document has been tampered with after signing.69% similarUnverifiedAll publicly trusted CAs must submit certificate information to at least one CT log when issuing a certificate, so when a new website applies for an SSL certificate, its domain information appears in the public log.66% similarUnverifiedOnce attackers obtain the intermediate CA's private key, they can issue TLS certificates for arbitrary domains in that CA's name, and end-user browsers and operating systems typically trust intermediate certificates derived from legitimate root CAs.66% similarUnverifiedApplications that ignore the system certificate store will throw errors such as UNABLE_TO_VERIFY_LEAF_SIGNATURE or self signed certificate in managed network environments.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1078538API
curl https://kongchang.com/api/v1/knowledge/claims/1078538MCP
get_claim(id=1078538)