

Always look for the green lock icon when accessing banking or shopping websites.

You are safe to stay on it, enter passwords, provide credit card numbers and send or receive other sensitive data. If that checking succeeds, the browser displays a green lock icon near the address bar, indicating the website you are visiting is actually the website that it claims to be. When you visit an HTTPS website, the browser checks that its certificate is valid and the certificate hierarchy ends on a known CA certificate. Usually root CA’s certificates are previously known by browsers. Root CA’s are public, well known and trusted organizations, such as the American FCPCA or the Brazilian ICP-Brasil. This chain of certificates is called the certificate hierarchy. On their turn, CA’s certificates may be self-signed (in the case of a company’s internal CA) or signed by other CA’s so forth up to a root certificate authority (root CA).

But usually website certificates are issued and signed by certificate authorities (CA’s), which also have their own certificates. Before establishing connection, the website presents to the browser a security certificate identifying itself.Īnyone can create a certificate claiming to be whoever they want. When you visit a website that uses secure connection (web address starting with https), your communication is encrypted to help ensure your privacy.
