Digital Certificates

Certificate Transparency Makes Public TLS Issuance Auditable

Certificate Transparency Makes Public TLS Issuance Auditable A publicly trusted TLS certificate can be technically valid and still be a serious security problem. A certificate authority may issue for the wrong domain after an account compromise, validation failure, or operational error. The certificate can carry a valid signature, chain to a trusted root, and satisfy ordinary hostname checks. From the browser’s perspective, those properties alone do not reveal that the domain operator never expected the certificate to exist.