difference between root and intermediate certificate

MP18 — Sat, 27 Oct 2018 03:42:31 GMT

As both these certs are signed by the CA

What is difference between them?

Re: difference between root and intermediate certificate

Remo — Sat, 27 Oct 2018 08:48:20 GMT

The root CA is a self signed cert while the intermediate is signed by the root. On the clients only the root cert has to be installed to verify cert paths. So the root is your trust anchor. The private key for this one should only be stored completely offline to protect it as good as possible from attacks. If something happens (you loose the control over the intermediate private key) you can grab your root and sign a new one without touching the clients to delete the old and install a new root cert - which would be required when you loose controll over your root CA private key.

topic Re: difference between root and intermediate certificate in General Topics

difference between root and intermediate certificate

Re: difference between root and intermediate certificate