A digital ID for your website

An ID card is a proof of our identity. In the case of websites, the SSL certificate is such a proof which ensures the authenticity of the website and its owner. It is issued by the Certification Authority. Note, however, that only selected Certification Authorities, and thus the certificates they issue, are recognized by web browsers as secure and trusted.

Certificate Authorities, also called Certification Authority, are entities that issue digital certificates based on a public key and data provided by the certificate user. SSL certificates are among the most popular, they are the cornerstone of online communication security. They ensure the privacy of data (personal information, logins and passwords or credit card numbers) transmitted between servers and web browsers.

The Seal of safety
On the basis of the certificate signing request (CSR) sent by the user, the Certification Authorityanalyzes the request and after successful verification process issues a signed certificate, which can be implemented on the website. A certificate provided by a trusted Certification Authorityacts as a seal by which browsers recognize a website as trusted one. Such security protocols play a key role in the ecosystem of websites and the Internet itself, enabling users to conduct secure transactions on websites.

Browsers only trust proven suppliers
The number of websites is constantly growing, therefore it is impossible for browsers to “know” all SSL certificates in existence. They therefore rely on the competence of Certification Authorities, which act as a Trusted Third Party.
The process of gaining a browser’s trust requires the Certification Authority to guarantee high security standards and demonstrate compliance with the latest good practices, which is confirmed by a positive result of an audit verifying compliance with the WebTrust or ETSI standard. Only when a Certificate Authority proves that it meets these requirements do the certificates it issues are seem by browsers as trusted by default. All other certificates, issued by untrusted certification centers, will not be accepted by web browsers.

Not just the browsers…
A similar pattern occurs in the case of other digital certificates, such as electronic signatures. If issued by a trusted Certification Authority it will be accepted on any government platform and signed .pdf documents will be positively verified by programs such as those offered by Adobe. Additionally, thanks to a rigorous process of verifying user data, a virtually signed document will gain the same legal force as one with a handwritten signature. Such electronic signatures are therefore commonly used by companies to authenticate business documents and conclude agreements or transactions. This would not be possible without trusted Certification Authorities, such as Certum.
More information available at: Certum

Anna Sikorska, Product Manager at the Security and Trust Services Division at Asseco Data Systems.