Certification authority

As explained in Build Python Web Apps with Streamlit

A certificate authority is a trusted entity that validates identities and digitally signs certificates for them.

A certification authority (CA) is a trusted entity that verifies control of a domain and digitally signs a certificate for it. Browsers use that certificate as proof that a website belongs to the domain rather than an interceptor. section 12.4.2

A CA matters when deploying a public web app because it:

• Enables browsers to trust an HTTPS connection after the server presents a valid certificate. section 12.4.2
• Requires proof that you control the requested domain, commonly through DNS configuration. section 12.4.2
• Rejects certificates for domains you cannot control, such as an app's default Elastic Beanstalk domain. section 12.4.1

Requesting a certificate for a deployed app

After pointing a custom domain at an Elastic Beanstalk app, request a public certificate in AWS Certificate Manager. Enter the domain, add the CNAME records ACM provides to the domain's DNS, and wait for ownership verification. ACM can then generate and periodically renew the certificate. section 12.4.2 section 12.4.1

Figure 12.11 ACM shows CNAME records to add to your domain’s DNS to prove ownership.

Inspect the ACM CNAME records used to prove domain ownership. section 12.4.2

How Build Python Web Apps with Streamlit covers it

How deep it goes

Explains certificates, domain verification, DNS validation, and ACM renewal, but stops short of certificate internals.

Examples

Uses an Elastic Beanstalk app, a custom domain, ACM, and DNS CNAME records as the practical certificate workflow.

What it assumes

Assumes a deployed app and custom domain, while teaching why HTTPS requires domain control and a trusted certificate.

What you can do after

Operate/configure AWS Certificate Manager to request and validate a public certificate for a custom app domain.

How it connects

Connects certification authorities with HTTPS, digital certificates, DNS, domain ownership, AWS Certificate Manager, and Elastic Beanstalk.

liveBookmanning.com

Read Build Python Web Apps with Streamlit on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Real-World CryptographyA certificate authority is an entity that issues and digitally signs certificates binding public keys to identities or domains.
• 

  liveBookmanning.com
  Software Security for DevelopersA local certificate authority is a privately operated certificate authority that issues certificates within an organization's or development environment's trust boundary.
• 

  liveBookmanning.com
  ASP.NET Core in Action, 3eA certificate authority is a trusted entity that issues or signs digital certificates to attest to the identity of certificate holders.
• 

  liveBookmanning.com
  Learn PowerShell Scripting in a Month of Lunches, Second Edition: Write and organize scripts and toolsA certificate authority is a trusted entity that issues and signs digital certificates after validating certificate requests.
• 

  liveBookmanning.com
  Logs and TelemetryA certificate authority is a trusted entity that issues and validates digital certificates and maintains their revocation records.
• 

  liveBookmanning.com
  Google Anthos in ActionA certificate authority is a trusted entity that issues and signs digital certificates.
• 

  liveBookmanning.com
  Acing the CCNA Exam: Volume 2 Advanced Networking and SecurityA certificate authority is a trusted entity that issues and verifies digital certificates.

Compare how 8 books explain certification authority →

Related concepts

• certificateproduces · A digital certificate is a digitally signed credential that binds an identity to a public key and supports authentication or secure communication.
• public-key infrastructureused by · Public-key infrastructure is a framework of authorities, certificates, keys, policies, and procedures for establishing and managing public-key trust and digital identities.
• domain ownershipuses · Domain ownership is the assignment of responsibility for a business domain’s data, including its meaning, structure, quality, documentation, and governance, to the domain that produces it.
• root certificateincludes · A root certificate is a trusted certificate, typically self-signed, that serves as a trust anchor for validating a certificate chain and authorizing subordinate certificates.
• intermediate certificateincludes · An intermediate certificate is a certificate issued by a root or higher-level certificate authority to establish a trust chain for end-entity certificates.

This explainer was generated by Manning's knowledge graph from the text of Build Python Web Apps with Streamlit. The section links point to the parts of the book it draws on.