What is the purpose of a Certificate Authority (CA)?

The correct answer is A. To issue and sign X.509 certificates. A Certificate Authority (CA) is a trusted third party whose core function is to issue and digitally sign X.509 certificates, binding a public key to an identity (person, server, or organization) - making option A correct. This signature is what allows clients to trust that a…

Network Security

Question

Options

ATo issue and sign X.509 certificates
BTo encrypt X.509 certificates
CTo decrypt X.509 certificates
DTo store X.509 certificates

How the community answered

(37 responses)

A
95% (35)
C
3% (1)
D
3% (1)

Explanation

A Certificate Authority (CA) is a trusted third party whose core function is to issue and digitally sign X.509 certificates, binding a public key to an identity (person, server, or organization) - making option A correct. This signature is what allows clients to trust that a certificate is legitimate, not forged.

B (encrypt) is wrong: CAs don't encrypt certificates. Encryption is performed by the certificate holder using their public key.
C (decrypt) is wrong: Decryption is done by the private key owner, not the CA - the CA has no role in the data transmission itself.
D (store) is wrong: While some CAs maintain certificate revocation lists (CRLs), storage is not their defining purpose; issuance and signing is.

Memory tip: Think of a CA like a government passport office - it doesn't use your passport (encrypt/decrypt data), it issues and stamps it (signs certificates) so others know it's authentic.

Topics

#Certificate Authority#X.509 certificates#Public Key Infrastructure#Digital Signatures

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice