nfirm that the server is really the server that it claims to be and not some imposter. In order to do this the server will send to the client a digital certificate (also commonly referred to as an X.509 certificate). The certificate contains various information about the server including its full DNS hostname. Also within the certificate is the server&#39;s public key. The server operator will have a private key which is linked to the public key and must not be published.</p>

<p>Along with the certificate 