In a hierarchical CA topology, where can a subordinate CA obtain a certificate for itself?
- from the root CA only
- from the root CA or from self-generation
- from the root CA or another subordinate CA at the same level
- from the root CA or another subordinate CA at a higher level
- from the root CA or another subordinate CA anywhere in the tree
| Answers Explanation & Hints:
In a hierarchical CA topology, CAs can issue certificates to end users and to subordinate CAs, which in turn issue their certificates to end users, other lower level CAs, or both. In this way, a tree of CAs and end users is built in which every CA can issue certificates to lower level CAs and end users. Only the root CA can issue a self-signing certificate in a hierarchical CA topology. |