Trusted Certificate Authorities

Hi Andrew,

May need some more context on this question.

When you ask what exactly is being checked in a PKI certificate to validate it: It's taking the signature (encrypted hash) from the server certificate and decrypt that using the public-key of the signer. Then, comparing this value against the result of calculating your own hash of the server certificate.

The "Trusted Certificate Authorities" point to the valid signing chains for the certificate you expect to see from your server.

But probably you mean something else with your question, please abbreviatie.