Chapter 14 - 04 - Discuss PKI and Certificate Management Concepts - 04_ocred.pdf

o, CTERISECUnty Cryptographv Technician Exam 212.82 @ In secure PKI, roo t and intermediate CAs are Created, and root CAs can be taken offline, leaving the certificate issuing tasks to the | intermediate cas (which as the serve @ aCtive | CAS) | | | | | | | ::.............. ,’ When the validity of a...

o, CTERISECUnty Cryptographv Technician Exam 212.82 @ In secure PKI, roo t and intermediate CAs are Created, and root CAs can be taken offline, leaving the certificate issuing tasks to the | intermediate cas (which as the serve @ aCtive | CAS) | | | | | | | ::.............. ,’ When the validity of an intermediate ca expire s, the root CA js brough t online to perform renewa ) tasks ,' | i i, 2,.:.....u.....‘., | m e ::.. v m oy................ 6 m Whsseanassuincici] R o ot e = 6 m v m......;........................ m........................ i... o Root €A (Offline)..................................................................................... " \4 — A4 o Intermediate ca v £ v £ ‘i.............................. s \4 o Intermediate ca v 4 £ ‘ — v ° Intermediate ca 4 2. (& 4 :...........................................1'................5..........................:..... £ Client Certificates Module 14 Page 1704 Figure 14.29: Online vs, offline CAs Certified Cvbersecurlty Technician Copyright All Rights Reserved, © by Ecocouncll Reproduction ic () Certified Cybersecurity Technician Exam 212-82 Cryptography Certification Authorities dgcert : mosary o esas| i comMoDo e DIGITAL CERTIFICATES FOR EVERY SECURITY NEED ‘@ O swwen O 0w [rer— Kol besmarg i Jo o o & e Sty neseernest, 4000 443 4K H Prtps//www.identrust.com authentic. : Q Starting at $125 "y Buries Communty Get an SSL certificate. Show visitors you're trustworthy and @ vsvor (T Buy SSL Certificates Secure Your Site with SSL Today! IdenTrust & tgn Fotees Conticotss Nessge My Cortiuste Sappect o One identity, multiple uses. Copyright © by EC L All Rights Reserved. Reproductionis Strictly Prohibited Certification Authorities Certification authorities (CAs) are trusted entities that issue digital certificates. The digital certificate certifies the possession of the public key by the subject (user, company, or system) specified in the certificate. This aids others to trust signatures or statements made by the private key that is associated with the certified public key. Some popular CAs are discussed below: = Comodo Source: https://www.comodoca.com Comodo offers a range of PKI digital certificates with strong SSL encryption (128/256 available) with Server-Gated Cryptography (SGC). It ensures standards of confidentiality, system reliability, and pertinent business practices as judged via qualified independent audits. It offers PKI management solutions such as Comodo Certificate Manager and Comodo EPKI Manager. Module 14 Page 1705 Certified Cybersecurity Technician Copyright © by EC-Council All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Cryptography SSL Certificates Web Security Signing Certificates Certificate Manager PCI Scanning (O chat support @ cc.,g‘m,gfig Website Backup & Login &) US Dollar v~ Partners Q (U Home > Homepage Secure Your.. Site with SSL Buy SSL Certificates I oday. | Starting at $125 As low as $125/ year « Compatible with all popular browsers Copodoc oy certiicates Unlimited server licensing ComodoCA OV Certificates 24/7 expert support from our team ComodoCA EV Certificates Unlimited re-issuance ComodoCA Multi-Domain 30-day money back guarantee ComodoCA Wildcard Certificates ComodoCA UCC Certificate Compare Certificates Figure 14.30: Screenshot of Comodo Website * |denTrust Source: https://www.identrust.com IdenTrust is a trusted third party that provides CA services for many sectors such as banks, corporates, governments, and healthcare. It provides solutions such as digital signing and sealing, compliance with NIST SP 800-171, global identity networks, and managed PKI hosting services. Application Status ldenTrust My part of 10D Globiw o. One Buying Community My Account Certificates Announcements Manage My Certificate Contact Us} Support Eo identity, multiple uses. Authentication. [ Digital signatures, Encryption, EXPLORE SOLUTIONS ] Figure 14.31: Screenshot of IdenTrust Website Module 14 Page 1706 Certified Cybersecurity Technician Copyright © by EC-Gouncil All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Cryptography = DigiCert CertCentral Source: https://www.digicert.com CertCentral simplifies the entire lifecycle by consolidating tasks for issuing, installing, inspecting, remediating, and renewing TLS/SSL certificates. It manages high-volume TLS/SSL certificate issuance for multiple individuals and teams. TLS/SSL Certificates « PKI & 10T Trust + Partners (7] C;g[CCIL PPOIt v @ OQaQe Figure 14.32: Screenshot of DigiCert Website = GoDaddy Source: https://www.godaddy.com GoDaddy SSL Certificates offer a complete range of certificates that comply CA/Browser Forum guidelines. They provide the SHA-2 encryption, protection of unlimited servers, etc. hash algorithm Help by GoDaddy Guides and with 2048-bit Signinv SSL Certificates Get an SSL certificate. Show visitors you're trustworthy and authentic. Call for a free security assessment: (480) 463-8327 Figure 14.33: Screenshot of GoDaddy Website Module 14 Page 1707 Certified Cybersecurity Technician Copyright © by EC-Gouncil All Rights Reserved. Reproduction is Strictly Prohibited.