Certificat de clé publique

Partager
" Retour à l'index des glossaires

A public key certificate, also known as a digital certificate, is a digital document used in cryptography to verify the ownership of a public key. It contains information about the key, information about the identity of its owner (called the subject), and the digital signature of an entity that has verified the certificate’s contents (called the issuer). There are various types of certificates, including root, intermediate, end-entity, and wildcard certificates, each serving different functions within the certificate hierarchy. Certificate Authorities (CAs) such as IdenTrust, DigiCert, and Sectigo, issue these certificates and also manage their revocation. Certificates are crucial in site web[1] security[2], ensuring secure connections over SSL/TLS protocols, and offer different validation levels. They follow certain standards and are recommended for secure website usage. Understanding public key certificates is integral to appreciating web security and encryption.

Définitions des termes
1. site web. Ce texte traite principalement du concept de "site web". Un site web est un ensemble de pages web interconnectées, comprenant généralement une page d'accueil, situées sur le même serveur et préparées et maintenues comme un ensemble de données par une personne, un groupe ou une organisation. Les sites web sont une pierre angulaire de l'internet, servant de centres d'information, de commerce, de communication et de divertissement. Ils peuvent revêtir diverses formes, telles que des sites commerciaux, des sites de jeux, des plateformes universitaires ou des sites de réseaux sociaux. Les sites web ont évolué au fil du temps, passant du texte et des images statiques à des plateformes multimédias dynamiques et interactives. Le développement et la fonctionnalité des sites web sont régis par les normes web établies par le World Wide Web Consortium (W3C). Les sites web sont également influencés par les progrès de la technologie des serveurs web et les principes de conception tels que le responsive design.
2. security. Security, as a term, originates from the Latin 'securus,' meaning free from worry. It is a concept that refers to the state of being protected from potential harm or threats. This protection can apply to a wide range of referents, including individuals, groups, institutions, or even ecosystems. Security is closely linked with the environment of the referent and can be influenced by different factors that can make it either beneficial or hostile. Various methods can be employed to ensure security, including protective and warning systems, diplomacy, and policy implementation. The effectiveness of these security measures can vary, and perceptions of security can differ widely. Important security concepts include access control, assurance, authorization, cipher, and countermeasures. The United Nations also plays a significant role in global security, focusing on areas like soil health and food security.

Au cryptography, a public key certificate, also known as a digital certificate ou identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes the public key and information about it, information about the identity of its owner (called the subject), and the digital signature of an entity that has verified the certificate's contents (called the issuer). If the device examining the certificate trusts the issuer and finds the signature to be a valid signature of that issuer, then it can use the included public key to communicate securely with the certificate's subject. In email encryption, code signinget e-signature systems, a certificate's subject is typically a person or organization. However, in Transport Layer Security (TLS) a certificate's subject is typically a computer or other device, though TLS certificates may identify organizations or individuals in addition to their core role in identifying devices. TLS, sometimes called by its older name Secure Sockets Layer (SSL), is notable for being a part of HTTPS, a protocol for securely browsing the web.

In a typical public-key infrastructure (PKI) scheme, the certificate issuer is a certificate authority (CA), usually a company that charges customers a fee to issue certificates for them. By contrast, in a web of trust scheme, individuals sign each other's keys directly, in a format that performs a similar function to a public key certificate. In case of key compromise, a certificate may need to be revoked.

The most common format for public key certificates is defined by X.509. Because X.509 is very general, the format is further constrained by profiles defined for certain use cases, such as Public Key Infrastructure (X.509) as defined inRFC 5280.

" Retour à l'index des glossaires
fr_FRFR
Retour en haut