🏅

TLS Certificates & PKI

Medium

Free preview · 2 of 5 steps

PKI: a chain of trust to a root

Public Key Infrastructure (PKI) establishes trust through a hierarchy. A Root CA (Certificate Authority) is trusted by your OS/browser by default. The Root CA signs Intermediate CAs, which sign leaf certificates for websites.

You don't need to trust each website individually — you trust the Root CAs, and they vouch for everything below them.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step