Knowledge check

X.509 certificates & the PKI trust hierarchy

10 questions testing what you just read — no login, no tracking, just immediate feedback.

Question 1 of 10

What's the purpose of a root CA certificate in the chain of trust?

Question 2 of 10

What does OCSP stapling eliminate, compared to plain OCSP?

Question 3 of 10

What does Certificate Transparency (CT) defend against?

Question 4 of 10

What does a certificate's Subject Alternative Names (SAN) field do?

Question 5 of 10

Do modern browsers use the legacy Subject/CN field for hostname matching?

Question 6 of 10

What's the main practical drawback of CRLs compared to OCSP, per the module?

Question 7 of 10

What does Mutual TLS (mTLS) add on top of ordinary TLS?

Question 8 of 10

What protocol and organization popularized free, automated certificate issuance with much shorter validity periods?

Question 9 of 10

How long is a typical Let's Encrypt certificate valid for, versus older multi-year certificates?

Question 10 of 10

What real-world incident does the module cite as an example of a trusted CA fraudulently issuing a certificate?

0 / 10 answered