Root CA
A top-level certificate authority preinstalled in the trust stores of operating systems and browsers, used to issue intermediate CA certificates; its private key is typically strictly protected by a hardware security module.
Timeline (last 90 days)
PKI binds identities to public keys through a CA hierarchy, and its security depends on the assumption that 'all CAs strictly safeguard their private keys'; there are dozens of root CAs worldwide, distributed across different jurisdictions, and audits struggle to cover internal operations.
In the PKI system, root certificates are usually kept offline and rarely issue end-entity certificates directly, while intermediate CAs handle day-to-day issuance duties.
An intermediate CA is a certificate authority issued and authorized by a root CA, performing day-to-day certificate issuance on behalf of the root CA.
All Facts (3)
PKI binds identities to public keys through a CA hierarchy, and its security depends on the assumption that 'all CAs strictly safeguard their private keys'; there are dozens of root CAs worldwide, distributed across different jurisdictions, and audits struggle to cover internal operations.
50%UnverifiedIn the PKI system, root certificates are usually kept offline and rarely issue end-entity certificates directly, while intermediate CAs handle day-to-day issuance duties.
50%UnverifiedAn intermediate CA is a certificate authority issued and authorized by a root CA, performing day-to-day certificate issuance on behalf of the root CA.
50%