Question

1) How does Let’s Encrypt verify that a certificate signing request came from the correct entity for their Domain Validation (DV) certificates?  What are two disadvantages/limitations to using method of validation?

2) What are Extended Validation certificates? What are two advantages and disadvantages to using extended validation certificates?

3) What steps could you take to ensure that you have the correct root certificate for Let’s Encrypt in your browser?

Answer 1

Let's Encrypt offers domain-validated certificates, meaning they have to check that the certificate request comes from a person who actually controls the domain. They do this by sending the client a unique token, and then making a web or DNS request to retrieve a key derived from that token.

An Extended Validation SSL Certificate (also known as EV SSL for short) is the highest form of SSL Certificate on the market. While all levels of SSL – Extended Validation (EV), Organization Validated (OV), and Domain Validated (DV) – provide encryption and data integrity, they vary in terms of how much identity verification is involved.

Please do like