234k views
4 votes
Which entity must certify the public key pair of a root CA?

A. Subordinate CA
B. The root CA
C. Kerberos server
D. External CA

1 Answer

3 votes

Final answer:

The root CA is responsible for certifying its own public key pair through a process known as self-signing, which establishes the root of trust in the PKI hierarchy.

Step-by-step explanation:

In the context of Public Key Infrastructure (PKI), the entity responsible for certifying the public key pair of a root Certificate Authority (CA) is typically the root CA itself. The root CA is at the top of the certification hierarchy and is therefore self-signed. This means that the root CA uses its own private key to create a digital signature that validates its public key. Trust in the root CA is essential, as all certificates issued by the root and subordinate CAs derive their trust from the root CA's integrity and security practices.

User Dylan Slabbinck
by
6.9k points