Intro to Digital Certificates

This tutorial starts with a review of Symmetric and Asymmetric (PKI) Encryption. It discusses self signed certificates and how an SSL certificate is used in a Client-Server web communication session.
05:31 digital certificate 06:31 trust 06:45 CA 06:52 A certificate authority validates the identity of the certificate holder 07:21self-signed certificate 08:55 user identification 12:37 self-signed certificate 15:14 testing 15:25 self-signed certificate , root certificate 17:18
This is the second in a series on how encryption and certificates work. Other videos are:
Introduction to Encryption
Certificates: Chain of Trust

[@arjunbadarinath]

Undoubtedly, the best explanation of PKI and digital certificates. Thanks Dave!

[@ABDULKARIMHOMAIDI]

I agree

[@evanxu5883]

I spent 2 hours in the class and couldn't think it through but it only took me 21 minutes to understand via this video. Thank you David!

[@purrplemane5954]

Yeah fer real. This presentation was well done and easily understood. Now I have cleared up a lot of confusion previously in my mind. Thanks a million to David

[@ambervinson5181]

Great video! I love how you broke it down and walked through it nicely. Thank you.

[@lg2058]

Along with great information presentation style, the presenter has a perfect knowledge reinforcement/voice/speed balance, which makes the info really sink in. No accent helps to stay focused as well.

[@MohamedMohamed-kw2dg]

Amazing, best digital certificate explanation on youtube!.

[@jayantsande1165]

Very well explained Dave ! Helped clear understanding of flow between browser and webserver. Keep uploading the such great videos. Many Thanks

[@domaincontroller]

05:31 digital certificate 06:31 trust 06:45 CA 06:52 A certificate authority validates the identity of the certificate holder 07:21self-signed certificate 08:55 user identification 12:37 self-signed certificate 15:14 testing 15:25 self-signed certificate , root certificate 17:18

[@krishnabala8403]

Wow! Really great explanation. Really clears up a lot of questions I had about CA, Digital certs and how TLS uses asymmetric/symmetric encryption and why symmetric is better. All of of this knowledge in one place! Thank you.

[@pkelly20091]

very pleased with the explanation - i watched about 4 videos about digital certificates and this is the one which got me understanding it properly.

[@ashzgtx]

Thank you. have seen many tutorials but this is the first one that makes complete sense to me ! Best wishes...

[@blopbop5405]

I've been scrambling to figure out PKI the past few days and this video really helped me glue all the pieces together to solidify my knowledge of PKI. Thank you!!!

[@shankysodhi]

This was really informative video . Thanks Dave ! Hope you keep creating these type of instruction content !!

[@daryllee3814]

The best explanation I have encountered. Made it very simple and clear. Thank you !

[@_.sumit._]

The best explanation video on the web. Thanks for creating this Dave.

[@maciej.wolosewicz]

Dave! Great video! I'm very impressed how simple is that! Thank you!

[@suneetdixit7904]

One of the best explainer videos. Very easy to understand and covers all the basics

[@estocapiodanhillb.8104]

Thanks for the tutorial, it's much faster than any other method I came across.

[@GM-qv1ql]

This is simply brilliant..and brilliantly simple..great job!!

[@gabrielaranamtz1400]

UHTi iklkouuo

[@amg3739]

Lovely lecture! You took enough time to explain the concepts at ease.. Thanks.

[@rameshnyc6798]

Amazing video on digital Certs, if you land here just think you got your answers with this video

[@suhailthottungal5301]

Perfectly explained. Great Job. It helped me a lot. Thanks, Mr.Dave

[@mahendratiwary3689]

Amazing video. Thanks Dave for making it so nice and clear.

[@rakesh4a1]

Explanation is complete with the real time example.
Though i know these things, i still liked the way you explained.
Thanks a lot.

[@zomgoose]

I have been working on my understanding of certificates and PKI. This clarified a few additional things for me. Thank you for the info and details!

[@GeorgeJoseph-iv9sg]

One of the best explanations on this topic. Thanks Dave 👌

[@samari1011]

Thank you for sharing. This is great - explained in its most simplest form.

[@vipul6304]

He is really an expert on this subject. Very well explained, understood the concept.

[@JoLRico]

OMG, you answered all the questions I didn't know I had. Thank you!

[@yalynats]

Great! Finally I got the whole process. Thanks a lot!

[@user-sk6vy2ze9p]

Dave, Thank you very much for such a clear and complete explanation.

[@jabrouni2]

Amazing explanation! Concise and clear

[@rapper5933]

PKI and Certificates are always a tricky subject. This is so far THE best video I've seen going into depth on the subject. I would recommend this video to anyone in IT.

[@davecrabbe4579]

Thanks Charlie.. sometimes hard to find that balance of going into enough detail but not so much detail that the overall concept gets lost.

[@faiyaz203]

Many Thanks !!! for your kind and detail Explanation.. God Bless You !!!

[@sunilaryal5185]

This is very helpful for the reader simply explained and with good examples. Really amazing video.

[@RalfNeitzkeCampos]

Thanks for the amazing Tutorial!

[@syed_hussaini]

I had a doubt between public & private key but, after going through your video session I got the difference between them.

[@praveenkumarmummidivarapu]

such a wonderful explanation...I really appreciate the effort

[@mdfarhadhussain]

The best tutorial in the net about certificate

[@couturebas]

Thanks for this video, best explanation on the net.

[@colinm5545]

Thanks for the video! This finally made it click for me.

[@wicckugupta]

Perfect demonstration, it include awesome theory and practical .
I am fan of you video now !

[@shairontoledo]

Thanks Dave, you're a great teacher.

[@mostinho7]

DONE thanks moved notes to onenote
6:25 digital certificate includes the public key only not the private key
8:30 how user/server gets a certificate from a certificate authority. The user generated their own public and private keys, they give that along with their identification to a certificate authority. This is called a certificate signing request CSR. The certificate authority then signs the certificate and gives it back to the user.
9:45 the certificate contains: public key only not private obviously, the CA identification and certificate owner/public key owner identification
10:30 how to make a CSR certificate signing request
.key file contains key
12:41 self signed certificate
A CA signing the certificate provides TRUST that the public key belongs to the person we think we are talking to. However, the certificate itself containing the public key that we use for encryption is what provides the encryption. Without a CA, we can still have encryption, but we can’t trust that when we connect to a server, the server/person responding is who they say they are (man in the middle attack). When the certificate is signed by a CA, we can be sure that they are who they say they are.
Example, we think we are talking to Alice, but bob intercepts the message and sends us his own public key and says I am Alice. We think we are talking to Alice, but we are actually talking to bob. Our messages are still encrypted though but now bob can read them. A CA tells us hey this public key actually does belong to Alice so you can go ahead and use it to encrypt your message.
15:30 so just using a self signed certificate allows you to encrypt messages, but you are vulnerable to a man in the middle attack. To mitigate this, you need a CA to check with it “hey does this public key belong to person x”. You can set up a self signed CA (called a self signed CA because you usually non-root CAs are signed by another root CA - chain of trust) and create a root-certificate. You need to install the root certificate in every machine in your organization (like the hardcoded root CAs in your OS or web browser)
17:40 TLS flow

[@abcdxyz3255]

Thanks a lot...i have been in IT field for a long time...many times i tried to understand keys, certificates etc... finally this video gave me a clear understanding ..thanks again.

[@nnerm007]

well explained. thank you Dave.

[@JohnJohn-sf1df]

Taking Security+ in 2 weeks. Every bit of extra info helps. Thank for clearly explaining ssl communication.

[@michaelgarner4315]

Excellent explanation of a complex topic. Beginning the video with a review of symmetric and asymmetric encryption was super helpful and really paid off at the end. Thank you for producing and sharing this video!

[@davecrabbe4579]

Thanks for the comment

[@massimilianoausili6666]

The best explanation I have heard. Very calm and clear. I got everything and I an not language native.

[@davecrabbe4579]

thanks for the kind feedback. Glad it helped with this topic.

[@viralsanghavi7]

Great tutorial Dave! you made it simpler to understand

[@thomasgould3461]

Mr Crabbe. OMG. I am working on my degree in Cyber Security. I am currently taking my Cryptography class. Unfortunately the study material is absolute garbage. I have had to resort to outside teaching material to learn. Thank you for this video. It has helped me a ton.

[@davecrabbe4579]

grin.. glad it helped

[@adarsh3589]

This is just awesome... The first diagram was worth millions

[@DoniDarkslide]

Thanks for the great explanation. This helped a lot to understand the topic!

[@jeremyxia3595]

This world needs more people like you

[@ToddCBrown]

Dave - Thank you so much for sharing this. It is a great review even if you deal with it a lot. Good work

[@deepakshinde7997]

this video gives lot of information in very simple terms. thank you

[@arjunchd04]

Very good tutorial , covering symmetric , asymmetric keys , SSL , how certificate is generated and signed......

[@nayl3476]

one of the best explanation i saw on the subject, specialy on the self certificat CA

[@davecrabbe4579]

thank you

[@akashkarve1991]

Awesome video
Complex concepts explained in simple way
Appreciate your efforts

[@ghassenbenmansour3159]

Very good explanation, thanks for the effort!

[@MuhammadAsifRHCE]

Good one. This tutorial has cleared my basic concepts about ssl

[@nmlokman8538]

SO SO SO easy to understand, thank you !

[@kingsleybaffourawuah]

this gives a very good understanding about the subject... kudos

[@kvishnuteja334]

This is truly informative thanks much sir!

[@josephwong2832]

Thanks a lot Dave the video was a bit slow but now I understand completely the key exchange!!!!

[@RicardoDiaz21129]

Very well explained. Thank you

[@navneetpathak3636]

best tutorial. thanks a lot Dave !!

[@itsajoke5354]

Wow! I am really impressed. Thank you sir! Much love from germany

[@dpasadis]

Excellent tutorial. Thank you.

[@ritdesh5220]

i'm now your subscriber ! Great job Dave !!

[@IgorOlikh]

Great explanation! Thank you.

[@poralentierno]

Ive been in this industry for years, I tell you this is the most comcise, informative and to the point video about cert. Thank you

[@srinadhp]

thanks a lot for a informative video. Very well explained!

[@boronxxx]

Beautifully explained!

[@amazingmanish]

Nice explanation !!

[@frankie_goestohollywood]

I'm so glad I found this!!!!! Thank you!!! :-)

[@hugosmooth7726]

Very clear, thank you!

[@erickmanuelbazansalinas2406]

Thanks a lot, great tutorial.

[@piyushverma1077]

Thanks a lot sir...very detailed lecture finally i understood this topic

[@nghibui6162]

best explanation ever! Thank you!

[@hudakhaled8353]

Thank you for this amazing clear explanation

[@varunh93]

This is crystal clear!

[@SlowCarToChina]

Great tutorial. It took me a while to shake off the confusion caused by hearing "ncss.ca" and assuming the .ca meant it was a CA.

[@ToddCBrown]

CA=Canada

[@SSSS-sb5ix]

You are right. It took me a while too.
Better to use .com for example. (ca seemed to be CA at first.)

[@davecrabbe4579]

yes.. If I redo.. I will not use .CA.. am so used to that domain; being from Canada...

[@jeffgreen4903]

@@davecrabbe4579 ... no issue for us Canadians :)

[@LeonTGBU]

Watch at 2x speed, very great breakdown!

[@Yash42189]

ah yes, a Dave Crabbe video. it's almost a certificate in itself guaranteeing that I will understand this topic after watching this.

[@davecrabbe4579]

hey!.. thanks for the vote of confidence..

[@edselcorreya]

Excellent explanation.

[@genemgranstaff]

Thank you very much for this video!

[@KamalMettananda]

Thanks a lot, quick and clear.

[@prafullpandit531]

wonderful explanation !!!

[@jnelly3426]

I hope you’re still around. That was explained very well

[@davecrabbe4579]

grin.. yes.. but retired from the College.. I still do the odd videos, though..

[@muddasarmunir6939]

Excellently explained

[@arpitagrawal1966]

Excellent explanation.. Best on Internet

[@johnandrews1683]

Great video. Thanks!

[@cdespejo]

Fantastic video thank you!

[@ValliNayagamChokkalingam]

Nice explanation!

[@himabindubt745]

Wow great explanation!!

[@NabeelIbrahimcp]

Awesome explanation

[@hbsvidu]

Thanks great explanation (y)

[@shajamal7624]

Thanks.. nicely explained.

[@dwightgrupp8181]

Great Video! Life Saver.

[@doctor_foobario]

Great explanation, very helpful thanks :-)