Digital certificates in e-commerce

1. Digital
Certificates in E-
Commerce
Mahesh Tawade

2. What is digital certificate
 A Digital Certificate is an electronic "password" that
allows a person, organization to exchange data
securely over the Internet using the public key
infrastructure (PKI). Digital Certificate is also known
as a public key certificate or identity certificate
 Digital Certificates are a means by which consumers
and businesses can utilise the security applications
of Public Key Infrastructure (PKI). PKI comprises of
the technology to enables secure e-commerce and
Internet based communication

3. Types of Digital Certificates
There are three main types of Digital Certificates,
they are:
1. Secure Socket Layer Certificate [SSL]
2. Code Signing Certificate
3. Client Certificate

4. Secure Socket Layer
 SSL Certificates are small data files that digitally bind
a cryptographic key to an organization detail.
 When installed on a web server, it activates the padlock
and the https protocol and allows secure connections
from a web server to a browser.
 Typically, SSL is used to secure credit card
transactions, data transfer and logins, and more recently
is becoming the norm when securing browsing of social
media sites.

5. What does a website with an SSL
Certificate installed look like?

6. Code Signing Certificate
 Code Signing Certificates are used to sign
software or programmed code that is downloaded
over the Internet.
 It is the digital equivalent of the shrink-wrap or
hologram seal used in the real world to
authenticate software and assure the user it is
genuine and actually comes from the software
publisher that it claims.

7. How Code Signing Works

8. Client Certificate
 A client digital certificate or client certificate is basically a file,
usually protected with a password and loaded unto a client
application .
 A client certificate would typically contain pertinent information
like a digital signature, expiration date, name of client, name of
CA (Certificate Authority), revocation status, SSL/TLS version
number, serial number, and possibly more.
 At the start of a SSL or TLS session, the server may require
the client application to submit a client certificate for
authentication. Upon receiving the certificate, the server would
then use it to identify the certificate's source and determine
whether the client should be allowed access.
 Actually, popular Web browsers like Firefox, Chrome, Safari,
and Internet Explorer can readily support client certificates.

9. How Client Server Authentication Works

10. Where to get Digital Certificates ?
 All Digital Certificates come from a Certificate
Authority which is a computer system that is
capable of issuing the different types of Digital
Certificate.

11. THANK
YOU