Question

A user's browser displays a warning that a website's certificate cannot be verified, even though the site presents a valid-looking certificate with matching hostname and current dates. An analyst inspects the certificate and finds it was signed by an intermediate CA that the browser does not recognize. What is the most likely reason for the trust failure?

Accepted Answer

The chain of trust is broken because the intermediate CA does not link back to a trusted root CA in the browser's trust store

Answer

The certificate uses symmetric encryption instead of asymmetric encryption

Answer

The private key was transmitted across the network during the TLS handshake

Answer

The certificate's public key is too short to establish a session