Skip to main content
Cryptography

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

4
  • $\begingroup$ Just pointing out that since this great answer was written, the linked "trust structure" article at Let's Encrypt has been updated and doesn't reflect Dave's text. $\endgroup$ Commented Sep 25, 2024 at 8:29
  • 1
    $\begingroup$ For convenience, a link to the LetsEncrypt diagram from Aug 2021. $\endgroup$ Commented Dec 5, 2024 at 17:58
  • $\begingroup$ so iiuc, in technical terms a cross-signed certificate is when a private key holder generates — around its one and the same public key — both a self-signed "root" certificate for that key but also an intermediate certificate(s) through a third-party's CSR process? $\endgroup$ Commented Sep 11 at 17:46
  • 1
    $\begingroup$ @natevw: if one CA obtains certs for its one key both from itself and from another CA, which may or may not be the same CSR process used for end-entity certs, because the trust delegation for a CA is very different from that for an EE. $\endgroup$ Commented Sep 28 at 22:01