Certificate chain
A certificate chain is an ordered sequence of digital certificates linking an end-entity certificate through intermediate authorities to a trusted root certificate.
Real-World Cryptography
An ordered set of certificates linking a subject certificate through intermediate certificate authorities to a trusted root.
- How it is used
- Authenticates a TLS server by linking its domain certificate to a browser-trusted root CA.
- How deep it goes
- Explains leaf, intermediate, and root certificates, but stops short of detailed certificate-validation algorithms.
- Examples
- Uses Google’s certificate chain, browser trust stores, and the leaf-to-root signature sequence.
- What you can do after
- Evaluate how a browser connects a website certificate to a trusted root during TLS authentication.
Read how Real-World Cryptography explains certificate chain →
Software Security for Developers
A certificate chain is an ordered sequence of an end-entity certificate and the certificates of the intermediate and root authorities that establish its trust.
- How it is used
- Explains how applications verify server certificates and diagnose trust failures in HTTPS and other X.509 connections.
- How deep it goes
- Traces signatures and trust from end entity through intermediate to root, while deferring deeper cryptographic and revocation mechanics.
- Examples
- Uses github.com, DigiCert certificates, Ubuntu’s CA bundle, and OpenSSL verification output to demonstrate a complete chain.
- What you can do after
- Diagnose trust failures with OpenSSL and identify missing issuers, intermediate certificates, or trusted roots.
Read how Software Security for Developers explains certificate chain →
ASP.NET Core in Action, 3e
A certificate chain is an ordered sequence of digital certificates linking a server certificate to a trusted root certificate.
- How it is used
- Explains why HTTPS browsers accept or reject a server certificate.
- How deep it goes
- Defines chain structure and trust behavior, but stops short of certificate validation internals.
- Examples
- Uses ASP.NET Core development certificates, browser warnings, and the dotnet trust command.
- What you can do after
- Operate local HTTPS by trusting a development certificate and distinguish it from production certificates.
Read how ASP.NET Core in Action, 3e explains certificate chain →
Related concepts
- certificate validationused by · Certificate validation is the process of verifying a digital certificate’s authenticity, validity period, issuer trust, identity, and applicable constraints.
- self-signed certificatecontrasts with · A self-signed certificate is a digital certificate whose signature is created by the same entity and key identified by the certificate rather than by a certificate authority.
- root certificatehas part · A root certificate is a trusted certificate, typically self-signed, that serves as a trust anchor for validating a certificate chain and authorizing subordinate certificates.
- intermediate certificatehas part · An intermediate certificate is a certificate issued by a root or higher-level certificate authority to establish a trust chain for end-entity certificates.
- certificatehas part · A digital certificate is a digitally signed credential that binds an identity to a public key and supports authentication or secure communication.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.