Name: Rohan Konde
Roll No:52
Experiment No. 13
Topic: - Create and Verify Digital Certificate using tool (eg. Cryptool)
Digital certificates: secret-key encryption.
The other type of encryption uses a different process. A digital certificate is one example. Digital
certificates are issued to individuals by a certificate authority (CA), a private company that
charges either the user or the receiver for issuing a certificate. The company DocuSign is an
example of an issuer of digital certificates.
Organizations will use digital certificates to verify the identities of people and organizations they
do business with…and need to trust. For example, an online retail store, or even an organization
accepting a payment for merchandise, wants to make sure that someone sending credit card
information is the actual owner of the card and not someone with a stolen credit card number
trying to use it from a foreign country.
A digital certificate contains information that helps guarantee a person is not an impostor. You
get a digital certificate by request by visiting a CA website and providing information that
identifies you.
Your digital certificate will contain:
your name
the name of the certificate authority
a unique certificate serial number, its expiration date,
etc. a unique private key (to include with messages you
send) the digital signature of the CA
Once it’s issued, the CA will put the certificate on your hard drive, along with a private key.
Once that’s all in place, you’re ready to send certified emails. Oftentimes, an organization will
request that you obtain a digital certificate before you can communicate with them digitally, for
their own protection.
When you send an email using a digital certificate, it contains only the public information of the
user such as ID, name, and public key. The personal component of your signature credentials, the
private key, is not included in the certificate.
Compared to a handwritten signature, which few people bother to verify, a digital signature is
hard to forge or imitate because of all the safeguards that are in place.
Demonstration of digital signatures using CrypTool:
First we need to generate a hash value of the document. ...
Next, generate a key pair. ...
After successfully generating keys, encrypt the hash value generated earlier.
We need to create a certificate associated with the RSA key. ...
Click on “store signature.”
Create a digital certificate to digitally sign a document immediately
If you do not want to purchase a digital certificate from a third-party certificate
authority (CA), or if you want to digitally sign your document immediately, you can
create your own digital certificate.
To view the certificate in the Personal Certificates store, do the following:
Open Internet Explorer.
On the Tools menu, click Internet Options, and then click the Content tab.
Click Certificates, and then click the Personal tab.