Search code examples
sslssl-certificateroot-certificate

Intermediate Certificates in SSL


I have a reading about SSL certificates and its happening. I have read that the CA signs the certificate and also gives the private key to the web server. The doubt arises when intermediate certificates come into play.

If an intermediate certificates signs for the web server, does it mean that they provide the private key for the web server?

Am I missing out anything in this?


Solution

  • The CA does NOT provide the private key - if it did it would not be private anymore since the CA would know it. When applying for a certificate YOU generate a public/private key-pair and send the public key to the CA in a certificate signing request and the CA (whether it is a root or intermediate CA) generates a certificate that this public key is actually yours.