thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Commonly confused · Security Fundamentals & Crypto

CA vs RA: What's the Difference in PKI?

The certificate authority issues, signs, and revokes digital certificates. The registration authority verifies the identity of the requester on the CA's behalf but cannot sign certificates itself.

Certificate Authority (CA)

Full definition
vs

Registration Authority (RA)

Full definition
Certificate AuthorityRegistration Authority
Main jobIssue, sign, and revoke certificatesVerify identity of certificate requesters
Signs certificates?Yes, with the CA private keyNo
Maintains revocationYes, publishes CRL / runs OCSPMay request revocation
Position in workflowFinal issuing stepFront-end vetting step
Trust anchorRoot or intermediate CA certificatesNot a trust anchor
Remember it

The RA checks your ID; the CA stamps the certificate.

Exam tip

If a question asks which PKI component verifies identity before issuance, pick RA. If it asks which component signs or revokes, pick CA.

Tested on

More Security Fundamentals & Crypto look-alikes