title: Certificate & Hash checking?
body: <p>I'm asking this question in order for be 100% sure.</p>
  
  <p><a href="http://ntrg.cs.tcd.ie/mepeirce/Dce/99/ssl/works.htm" rel="nofollow">link</a></p>
  
  <blockquote>
    <p>To validate the certificate to ensure it contains the information
    digitally signed by the certificate authority, the web browser
    verifies the digital signature. Because the digital signature is an
    encrypted hash value that was computed based on the contents of the
    certificate, the web browser needs to compare hash values. The web
    browser computes a hash value based on the contents of the certificate
    it received. It then decrypts the digital signature to determine the
    hash value that the certificate authority computed. If the two hash
    values match, the web browser is assured that the certificate contains
    the information that the certificate authority verified and digitally
    signed.</p>
  </blockquote>
  
  <p>questions :</p>
  
  <blockquote>
    <p>The web browser computes a hash value based on the contents of the
    certificate it received</p>
  </blockquote>
  
  <p>The browser <em>knows</em> in which digest algorithm the certificate was used inside , so he uses it <em>also</em> to calculate a hash - based on the certificate content.</p>
  
  <blockquote>
    <p>It then decrypts the digital signature to determine the hash value
    that the certificate authority computed</p>
  </blockquote>
  
  <p>The browser knows which CA created the certificate , so he takes the public key from the appropriate <em>computer store location</em> and apply it on the encrypted hash value . the result is the decrypted hash value. </p>
  
  <p>It then see if both the same.</p>
  
  <p>Am I right ?</p>