In TLS, what does a digital certificate bind?

In TLS, what does a digital certificate bind?

• A. Provides private key to user
• B. Encrypts emails
• C. Binds a public key to an identity
• D. Stores user password

Answer: (C)

The digital certificate in TLS binds a public key to an identity. It carries the subject’s public key together with identifying information (like a domain or organization) and is signed by a trusted CA. This binding lets users and software verify that the public key actually belongs to the claimed identity, enabling secure key exchange and authentication during the TLS handshake. The private key remains with the owner and is not distributed, so the certificate isn’t about giving out private keys. It also isn’t about storing passwords, and while TLS can protect data in transit (including some email scenarios), the certificate’s purpose is the key-key-to-identity binding, not direct encryption of emails.

The digital certificate in TLS binds a public key to an identity. It carries the subject’s public key together with identifying information (like a domain or organization) and is signed by a trusted CA. This binding lets users and software verify that the public key actually belongs to the claimed identity, enabling secure key exchange and authentication during the TLS handshake. The private key remains with the owner and is not distributed, so the certificate isn’t about giving out private keys. It also isn’t about storing passwords, and while TLS can protect data in transit (including some email scenarios), the certificate’s purpose is the key-key-to-identity binding, not direct encryption of emails.