!!! Overview[1] In [cryptography] and computer security, a [{$pagename}] is an identity certificate that is [signed|DigitalSignature] by the same [entity] whose identity that is provides [Assertion][{$pagename}] term has nothing to do with the identity of the person or organization that actually performed the signing procedure. In technical terms a [{$pagename}] is one signed with its own [Private Key]. [{$pagename}] is a [Self-Asserted] [Certificate] just as a business card is an [Assertion] of employment. In typical [Public Key Infrastructure] ([PKI]) arrangements, a [Digital Signature] from a [Certificate Authority] (CA) attests that a particular [Public Key] certificate is valid (i.e., contains correct information). When a [{$pagename}] is used, there is no [Trust Anchor] that can participate in [Certificate Validation]. [{$pagename}] cannot (by nature) be revoked as there is no [Trust Anchor] that can participate in [Certificate Validation].[{$pagename}]s provide a lower [Risk] from these two aspects: * that they avoid the problems of trusting third parties that may improperly sign certificates. * transactions usually present a far smaller attack surface by eliminating both the complex [Certificate Validation] and [Certificate Chain] validation, and CA [Certificate Revocation] checks like [CRL] and [OCSP]. !! [{$pagename}] [Revocation|Certificate Revocation] [{$pagename}] cannot be revoked by a [Certificate Authority]. Revocation of a [{$pagename}] is accomplished by removing it from the [Truststore] (essentially the same as revoking trust in a [Certificate Authority]). !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }] ---- * [#1] - [Self-signed Certificate|Wikipedia:Self-signed_certificate/|target='_blank'] - based on information obtained 2016-04-30-