February 5, 2002
Practical Aspects of Modern Cryptography
37
CA Hierarchies
nCAs can certify
other CAs or “end entities”
nCertificates are
links in a tree of EEs & CAs
CA
EE
Root
CA
CA
EE
CA
EE