Which component of a digital certificate provides authentication of the certificate's issuer?

Question

Exhibit

Options

• Adigital signature
• Bcertificate revocation list
• Cissuer's private key
• Dcertificate's expiration date

• A
  95% (19)
• C
  5% (1)

Explanation

A digital signature on a certificate is created by the Certificate Authority (CA) using its private key, and anyone can verify it using the CA's public key - this cryptographic proof is what authenticates the issuer's identity and confirms the certificate hasn't been tampered with.

Why the distractors are wrong:

• B (CRL): A Certificate Revocation List tracks revoked certificates; it plays no role in authenticating who issued a certificate.
• C (issuer's private key): The private key is what creates the signature but is never included in the certificate itself - exposing it would be a critical security breach.
• D (expiration date): This controls validity period only; it says nothing about who issued the certificate.

Memory tip: Think of the digital signature as the CA's "wax seal" - just as a royal seal on a letter proves who sent it, the CA's digital signature proves who issued the certificate.

No community discussion yet for this question.