What is an end-entity certificate?
什么是最终实体证书？
The end-entity certificate is the final link in the chain of trust. The end-entity certificate (sometimes known as a leaf certificate or subscriber certificate), serves to confer the root CA’s trust, via any intermediates in the chain, to an entity such as a website, company, government, or individual person. An end-entity certificate differs from a trust anchor or intermediate certificate in that it cannot issue additional certificates. It is, in a sense, the final link as far as the chain is concerned. The example below shows the end-entity SSL/TLS certificate from SSL.com's website:
最终实体证书 是信任链中的最后一个环节。 最终实体证书（有时称为 树叶证书 or 订户证书），用于通过链中的任何中间环节将根CA的信任关系授予网站，公司， 政府或个人。 最终实体证书与信任锚或中间证书的不同之处在于，它不能颁发其他证书。 从某种意义上说，它是链条上的最终链接。 下面的示例显示了最终实体SSL /TLS 来自 SSL.com 网站的证书：