Intro to Digital Certificates

This tutorial starts with a review of Symmetric and Asymmetric (PKI) Encryption. It discusses self signed certificates and how an SSL certificate is used in a Client-Server web communication session.
05:31 digital certificate 06:31 trust 06:45 CA 06:52 A certificate authority validates the identity of the certificate holder 07:21self-signed certificate 08:55 user identification 12:37 self-signed certificate 15:14 testing 15:25 self-signed certificate , root certificate 17:18
This is the second in a series on how encryption and certificates work. Other videos are:
Introduction to Encryption
Certificates: Chain of Trust

[@arjunbadarinath]

Undoubtedly, the best explanation of PKI and digital certificates. Thanks Dave!

[@ABDULKARIMHOMAIDI]

I agree

[@daryllee3814]

The best explanation I have encountered. Made it very simple and clear. Thank you !

[@ashzgtx]

Thank you. have seen many tutorials but this is the first one that makes complete sense to me ! Best wishes...

[@_.sumit._]

The best explanation video on the web. Thanks for creating this Dave.

[@zomgoose]

I have been working on my understanding of certificates and PKI. This clarified a few additional things for me. Thank you for the info and details!

[@pkelly20091]

very pleased with the explanation - i watched about 4 videos about digital certificates and this is the one which got me understanding it properly.

[@ambervinson5181]

Great video! I love how you broke it down and walked through it nicely. Thank you.

[@GeorgeJoseph-iv9sg]

One of the best explanations on this topic. Thanks Dave 👌

[@jayantsande1165]

Very well explained Dave ! Helped clear understanding of flow between browser and webserver. Keep uploading the such great videos. Many Thanks

[@mdfarhadhussain]

The best tutorial in the net about certificate

[@blopbop5405]

I've been scrambling to figure out PKI the past few days and this video really helped me glue all the pieces together to solidify my knowledge of PKI. Thank you!!!

[@krishnabala8403]

Wow! Really great explanation. Really clears up a lot of questions I had about CA, Digital certs and how TLS uses asymmetric/symmetric encryption and why symmetric is better. All of of this knowledge in one place! Thank you.

[@suneetdixit7904]

One of the best explainer videos. Very easy to understand and covers all the basics

[@maciej.wolosewicz]

Dave! Great video! I'm very impressed how simple is that! Thank you!

[@suhailthottungal5301]

Perfectly explained. Great Job. It helped me a lot. Thanks, Mr.Dave

[@shankysodhi]

This was really informative video . Thanks Dave ! Hope you keep creating these type of instruction content !!

[@mahendratiwary3689]

Amazing video. Thanks Dave for making it so nice and clear.

[@domaincontroller]

05:31 digital certificate 06:31 trust 06:45 CA 06:52 A certificate authority validates the identity of the certificate holder 07:21self-signed certificate 08:55 user identification 12:37 self-signed certificate 15:14 testing 15:25 self-signed certificate , root certificate 17:18

[@evanxu5883]

I spent 2 hours in the class and couldn't think it through but it only took me 21 minutes to understand via this video. Thank you David!

[@purrplemane5954]

Yeah fer real. This presentation was well done and easily understood. Now I have cleared up a lot of confusion previously in my mind. Thanks a million to David

[@samari1011]

Thank you for sharing. This is great - explained in its most simplest form.

[@yalynats]

Great! Finally I got the whole process. Thanks a lot!

[@rakesh4a1]

Explanation is complete with the real time example. Though i know these things, i still liked the way you explained. Thanks a lot.

[@GM-qv1ql]

This is simply brilliant..and brilliantly simple..great job!!

[@gabrielaranamtz1400]

UHTi iklkouuo

[@estocapiodanhillb.8104]

Thanks for the tutorial, it's much faster than any other method I came across.

[@user-sk6vy2ze9p]

Dave, Thank you very much for such a clear and complete explanation.

[@JoLRico]

OMG, you answered all the questions I didn't know I had. Thank you!

[@vipul6304]

He is really an expert on this subject. Very well explained, understood the concept.

[@amg3739]

Lovely lecture! You took enough time to explain the concepts at ease.. Thanks.

[@lg2058]

Along with great information presentation style, the presenter has a perfect knowledge reinforcement/voice/speed balance, which makes the info really sink in. No accent helps to stay focused as well.

[@couturebas]

Thanks for this video, best explanation on the net.

[@adarsh3589]

This is just awesome... The first diagram was worth millions

[@wicckugupta]

Perfect demonstration, it include awesome theory and practical . I am fan of you video now !

[@abcdxyz3255]

Thanks a lot...i have been in IT field for a long time...many times i tried to understand keys, certificates etc... finally this video gave me a clear understanding ..thanks again.

[@sunilaryal5185]

This is very helpful for the reader simply explained and with good examples. Really amazing video.

[@MohamedMohamed-kw2dg]

Amazing, best digital certificate explanation on youtube!.

[@shairontoledo]

Thanks Dave, you're a great teacher.

[@jabrouni2]

Amazing explanation! Concise and clear

[@JohnJohn-sf1df]

Taking Security+ in 2 weeks. Every bit of extra info helps. Thank for clearly explaining ssl communication.

[@jeremyxia3595]

This world needs more people like you

[@colinm5545]

Thanks for the video! This finally made it click for me.

[@ToddCBrown]

Dave - Thank you so much for sharing this. It is a great review even if you deal with it a lot. Good work

[@RalfNeitzkeCampos]

Thanks for the amazing Tutorial!

[@faiyaz203]

Many Thanks !!! for your kind and detail Explanation.. God Bless You !!!

[@nghibui6162]

best explanation ever! Thank you!

[@mostinho7]

DONE thanks moved notes to onenote 6:25 digital certificate includes the public key only not the private key 8:30 how user/server gets a certificate from a certificate authority. The user generated their own public and private keys, they give that along with their identification to a certificate authority. This is called a certificate signing request CSR. The certificate authority then signs the certificate and gives it back to the user. 9:45 the certificate contains: public key only not private obviously, the CA identification and certificate owner/public key owner identification 10:30 how to make a CSR certificate signing request .key file contains key 12:41 self signed certificate A CA signing the certificate provides TRUST that the public key belongs to the person we think we are talking to. However, the certificate itself containing the public key that we use for encryption is what provides the encryption. Without a CA, we can still have encryption, but we can’t trust that when we connect to a server, the server/person responding is who they say they are (man in the middle attack). When the certificate is signed by a CA, we can be sure that they are who they say they are. Example, we think we are talking to Alice, but bob intercepts the message and sends us his own public key and says I am Alice. We think we are talking to Alice, but we are actually talking to bob. Our messages are still encrypted though but now bob can read them. A CA tells us hey this public key actually does belong to Alice so you can go ahead and use it to encrypt your message. 15:30 so just using a self signed certificate allows you to encrypt messages, but you are vulnerable to a man in the middle attack. To mitigate this, you need a CA to check with it “hey does this public key belong to person x”. You can set up a self signed CA (called a self signed CA because you usually non-root CAs are signed by another root CA - chain of trust) and create a root-certificate. You need to install the root certificate in every machine in your organization (like the hardcoded root CAs in your OS or web browser) 17:40 TLS flow

[@deepakshinde7997]

this video gives lot of information in very simple terms. thank you

[@navneetpathak3636]

best tutorial. thanks a lot Dave !!

[@syed_hussaini]

I had a doubt between public & private key but, after going through your video session I got the difference between them.

[@DoniDarkslide]

Thanks for the great explanation. This helped a lot to understand the topic!

[@boronxxx]

Beautifully explained!

[@praveenkumarmummidivarapu]

such a wonderful explanation...I really appreciate the effort

[@nmlokman8538]

SO SO SO easy to understand, thank you !

[@nayl3476]

one of the best explanation i saw on the subject, specialy on the self certificat CA

[@davecrabbe4579]

thank you

[@massimilianoausili6666]

The best explanation I have heard. Very calm and clear. I got everything and I an not language native.

[@davecrabbe4579]

thanks for the kind feedback. Glad it helped with this topic.

[@itsajoke5354]

Wow! I am really impressed. Thank you sir! Much love from germany

[@arjunchd04]

Very good tutorial , covering symmetric , asymmetric keys , SSL , how certificate is generated and signed......

[@varunh93]

This is crystal clear!

[@MuhammadAsifRHCE]

Good one. This tutorial has cleared my basic concepts about ssl

[@nnerm007]

well explained. thank you Dave.

[@mariocortes2670]

The best tutorial

[@IgorOlikh]

Great explanation! Thank you.

[@michaelgarner4315]

Excellent explanation of a complex topic. Beginning the video with a review of symmetric and asymmetric encryption was super helpful and really paid off at the end. Thank you for producing and sharing this video!

[@davecrabbe4579]

Thanks for the comment

[@rapper5933]

PKI and Certificates are always a tricky subject. This is so far THE best video I've seen going into depth on the subject. I would recommend this video to anyone in IT.

[@davecrabbe4579]

Thanks Charlie.. sometimes hard to find that balance of going into enough detail but not so much detail that the overall concept gets lost.

[@ghassenbenmansour3159]

Very good explanation, thanks for the effort!

[@viralsanghavi7]

Great tutorial Dave! you made it simpler to understand

[@akashkarve1991]

Awesome video Complex concepts explained in simple way Appreciate your efforts

[@frankie_goestohollywood]

I'm so glad I found this!!!!! Thank you!!! :-)

[@LeonTGBU]

Watch at 2x speed, very great breakdown!

[@ritdesh5220]

i'm now your subscriber ! Great job Dave !!

[@hudakhaled8353]

Thank you for this amazing clear explanation

[@kvishnuteja334]

This is truly informative thanks much sir!

[@kingsleybaffourawuah]

this gives a very good understanding about the subject... kudos

[@poralentierno]

Ive been in this industry for years, I tell you this is the most comcise, informative and to the point video about cert. Thank you

[@dpasadis]

Excellent tutorial. Thank you.

[@prafullpandit531]

wonderful explanation !!!

[@rameshnyc6798]

Amazing video on digital Certs, if you land here just think you got your answers with this video

[@dwightgrupp8181]

Great Video! Life Saver.

[@arpitagrawal1966]

Excellent explanation.. Best on Internet

[@genemgranstaff]

Thank you very much for this video!

[@srinadhp]

thanks a lot for a informative video. Very well explained!

[@RicardoDiaz21129]

Very well explained. Thank you

[@muddasarmunir6939]

Excellently explained

[@cdespejo]

Fantastic video thank you!

[@KamalMettananda]

Thanks a lot, quick and clear.

[@hugosmooth7726]

Very clear, thank you!

[@piyushverma1077]

Thanks a lot sir...very detailed lecture finally i understood this topic

[@josephwong2832]

Thanks a lot Dave the video was a bit slow but now I understand completely the key exchange!!!!

[@erickmanuelbazansalinas2406]

Thanks a lot, great tutorial.

[@himabindubt745]

Wow great explanation!!

[@SlowCarToChina]

Great tutorial. It took me a while to shake off the confusion caused by hearing "ncss.ca" and assuming the .ca meant it was a CA.

[@ToddCBrown]

CA=Canada

[@SSSS-sb5ix]

You are right. It took me a while too. Better to use .com for example. (ca seemed to be CA at first.)

[@davecrabbe4579]

yes.. If I redo.. I will not use .CA.. am so used to that domain; being from Canada...

[@jeffgreen4903]

@@davecrabbe4579 ... no issue for us Canadians :)

[@amazingmanish]

Nice explanation !!

[@ValliNayagamChokkalingam]

Nice explanation!

[@valentinussofa4135]

Thank Sir. Great lecture. 🙏

[@johnandrews1683]

Great video. Thanks!

[@hamid7029]

Great job... thanks !

[@kumaravelrajan]

Excellent video

[@edselcorreya]

Excellent explanation.

[@NabeelIbrahimcp]

Awesome explanation

[@Arshar]

Thank you sir.. to the point, very nice..

[@salahaldeen3062]

You the best one explain that