Web Browser Certification

Browsers that wish to perform server authentication and allow servers to perform client authentication must be certified by the Certificate Authority (CA) and provide an enrollment service for clients. The process of becoming certified is called browser or client certification and is an interaction between the browser and one or more CAs. The following steps are performed in browser certification:

1. Using a distribution method provided by a server, the Web browser obtains and installs a CA certificate provided by the server's CA that issued its server certificate. The browser will use the CA certificate to validate the server's certificate. CA certificate installation procedures are described in Browser Installation of CA Certificates.
   
   
2. Using the enrollment service provided by the server, the Web browser requests and installs a client certificate. The client (browser) will use its client certificate to be authenticated by the server. Certificate enrollment procedures are described in Client Certificate Enrollment.