SSL Certificate

Question 1

what are SSL certificate

Answer 1

SSL or secure socket layer certificate is a small data file installed in the web server, used to encrypt the data exchanged between browser and server

Question 2

what are the components of a SSL certificate

Answer 2

there are 4 parts of SSL certificate

1. certificate owner’s distinguished name
2. certificate owner’s public key
3. issuer’s distinguished key
4. issuer’s digital signature

Question 3

what are the SSL certificate validation levels

Answer 3

1. domain validation certificate
2. organization validation certificate
3. extended validation certificate

Question 4

what are the types of SSL certificate

Answer 4

1. single name
2. domain name
3. multi-domain name

Question 5

what is TLS handshake

Answer 5

1. TLS handshake or transport layer protocol handshake is a way in which browser and server communicates in a secure manner
2. In TLS handshake
   
   1. client sends a client hello message that comprises of TLS version supported, cipher suits supported and a random number called client random
   2. server responds with a server hello message comprising of
      
      1. TLS cipher suit selected
      2. SSL certificate
      3. a random number called server random
   3. client verifies
      
      1. that the certificate is issued by distinguished issuer authority
      2. the digital signature
      3. the expiry
      4. the domain name
   4. the client generates a pre - master secret by using the public key that is obtained from SSL certificate
   5. the pre - master key is decrypted by server’s private key
   6. now using the client random, server random and pre-master key a session key is generated
   7. the client does the same
   8. now both server and client have same key
   9. this key is used to encrypt and decrypt the traffic payload

Question 6

what are HTTP cookies

Answer 6

Cookies are small text files which contains key, value and attributes; the cookie never exceeds 4 kb

Question 7

how many types of cookies are there

Answer 7

first party and third party

Question 8

based on validity how many cookies are there

Answer 8

session bound and permanent