Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?

share|improve this question
up vote 8 down vote accepted

Comodo have a root certificate whose public key is included in your web browser. The private key that matches the public key is used to sign SSL certificates that Comodo issue, and it can't be faked because no one else has the private key that matches the public key in the web browser.

share|improve this answer
Interesting, so corporations such as Apple and Google have the public key and put it in the browser. But only Comodo has the private key. Thanks for your help! – Jack Humphries Sep 6 '11 at 18:39
@JackHumphries: they even have policies regarding which certificates are bundled. For example: apple.com/certificateauthority/ca_program.html – Bruno Dec 21 '11 at 2:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.