{"id":16079,"date":"2026-07-22T23:53:17","date_gmt":"2026-07-22T20:53:17","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16079"},"modified":"2026-07-22T23:53:17","modified_gmt":"2026-07-22T20:53:17","slug":"root-ca-ve-intermediate-ca-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/","title":{"rendered":"Root CA ve Intermediate CA Nedir? K\u00f6k ve Ara Sertifika Otoriteleri Aras\u0131ndaki Hiyerar\u015fi Nas\u0131l \u00c7al\u0131\u015f\u0131r?"},"content":{"rendered":"<p>\u0130nternet \u00fczerinde g\u00fcvenli bir \u015fekilde gezindi\u011finizden nas\u0131l emin olursunuz? Taray\u0131c\u0131n\u0131z\u0131n adres \u00e7ubu\u011funda beliren asma kilit simgesi, asl\u0131nda karma\u015f\u0131k ve hiyerar\u015fik bir g\u00fcven mekanizmas\u0131n\u0131n sonucudur. Bu mekanizman\u0131n temelinde A\u00e7\u0131k Anahtar Altyap\u0131s\u0131 (PKI) ve bu yap\u0131y\u0131 y\u00f6neten Sertifika Otoriteleri (CA) bulunur. Bu otorite yap\u0131s\u0131, en tepede bulunan K\u00f6k Sertifika Otoritesi (Root CA) ve ondan yetki alan Ara Sertifika Otoriteleri (Intermediate CA) olmak \u00fczere katmanlara ayr\u0131l\u0131r. Bu hiyerar\u015fik yap\u0131, dijital kimliklerin do\u011frulanmas\u0131n\u0131 sa\u011flayarak e-ticaretten online bankac\u0131l\u0131\u011fa kadar t\u00fcm g\u00fcvenli ileti\u015fim s\u00fcre\u00e7lerini m\u00fcmk\u00fcn k\u0131lar. Peki, Root CA ve Intermediate CA nedir ve aralar\u0131ndaki bu g\u00fcven zinciri nas\u0131l i\u015fler?<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a61570d0282f\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6a61570d0282f\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Public-Key-Infrastructure-PKI-ve-Sertifika-Otoritelerinin-Temelleri\" >Public Key Infrastructure (PKI) ve Sertifika Otoritelerinin Temelleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Public-Key-Infrastructure-PKI-Nedir\" >Public Key Infrastructure (PKI) Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Dijital-Sertifika-Nedir-ve-Hangi-Bilgileri-Icerir\" >Dijital Sertifika Nedir ve Hangi Bilgileri \u0130\u00e7erir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Sertifika-Otoritesi-CA-Nedir-ve-Gorevleri-Nelerdir\" >Sertifika Otoritesi (CA) Nedir ve G\u00f6revleri Nelerdir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Dijital-Guvende-Sertifika-Otoritelerinin-Rolu\" >Dijital G\u00fcvende Sertifika Otoritelerinin Rol\u00fc<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Kok-Sertifika-Otoritesi-Root-CA\" >K\u00f6k Sertifika Otoritesi (Root CA)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Root-CA-Nedir\" >Root CA Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Root-CAlerin-Ozellikleri-Kendinden-Imzali-Self-Signed-Olma\" >Root CA\u2019lerin \u00d6zellikleri: Kendinden \u0130mzal\u0131 (Self-Signed) Olma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Kok-Sertifikalarin-Isletim-Sistemleri-ve-Tarayicilara-Dahil-Edilmesi-Trust-Store\" >K\u00f6k Sertifikalar\u0131n \u0130\u015fletim Sistemleri ve Taray\u0131c\u0131lara Dahil Edilmesi (Trust Store)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Root-CAlerin-Guvenligi-Cevrimdisi-Tutulma-ve-Fiziksel-Koruma\" >Root CA\u2019lerin G\u00fcvenli\u011fi: \u00c7evrimd\u0131\u015f\u0131 Tutulma ve Fiziksel Koruma<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Ara-Sertifika-Otoritesi-Intermediate-CA\" >Ara Sertifika Otoritesi (Intermediate CA)<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Intermediate-CA-Nedir\" >Intermediate CA Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Intermediate-CAlerin-Olusturulma-Amaci-Root-CAyi-Korumak\" >Intermediate CA\u2019lerin Olu\u015fturulma Amac\u0131: Root CA&#8217;yi Korumak<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Root-CA-Tarafindan-Imzalanarak-Yetkilendirilmesi\" >Root CA Taraf\u0131ndan \u0130mzalanarak Yetkilendirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Birden-Fazla-Ara-Sertifika-Katmani-Kullanimi-ve-Nedenleri\" >Birden Fazla Ara Sertifika Katman\u0131 Kullan\u0131m\u0131 ve Nedenleri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Guven-Zinciri-Chain-of-Trust-ve-Hiyerarsik-Yapi\" >G\u00fcven Zinciri (Chain of Trust) ve Hiyerar\u015fik Yap\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Guven-Zinciri-Nedir-ve-Nasil-Calisir\" >G\u00fcven Zinciri Nedir ve Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Sertifika-Zincirinin-Katmanlari\" >Sertifika Zincirinin Katmanlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Hiyerarsinin-Sagladigi-Guven-Modelinin-Incelenmesi\" >Hiyerar\u015finin Sa\u011flad\u0131\u011f\u0131 G\u00fcven Modelinin \u0130ncelenmesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Sertifika-Zincirinin-Tarayicilar-Tarafindan-Dogrulanma-Sureci\" >Sertifika Zincirinin Taray\u0131c\u0131lar Taraf\u0131ndan Do\u011frulanma S\u00fcreci<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Bir-Web-Sitesine-Baglanildiginda-Gerceklesen-Adimlar\" >Bir Web Sitesine Ba\u011flan\u0131ld\u0131\u011f\u0131nda Ger\u00e7ekle\u015fen Ad\u0131mlar<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Son-Kullanici-Sertifikasindan-Kok-Sertifikaya-Geriye-Donuk-Kontrol\" >Son Kullan\u0131c\u0131 Sertifikas\u0131ndan K\u00f6k Sertifikaya Geriye D\u00f6n\u00fck Kontrol<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Sertifika-Iptal-Listeleri-CRL-ve-OCSP-Protokolunun-Rolu\" >Sertifika \u0130ptal Listeleri (CRL) ve OCSP Protokol\u00fcn\u00fcn Rol\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Basarili-ve-Basarisiz-Dogrulama-Senaryolari-GuvenliGuvensiz-Baglanti-Uyarilari\" >Ba\u015far\u0131l\u0131 ve Ba\u015far\u0131s\u0131z Do\u011frulama Senaryolar\u0131 (G\u00fcvenli\/G\u00fcvensiz Ba\u011flant\u0131 Uyar\u0131lar\u0131)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Root-CA-ve-Intermediate-CA-Arasindaki-Temel-Farkliliklar\" >Root CA ve Intermediate CA Aras\u0131ndaki Temel Farkl\u0131l\u0131klar<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Guven-Kaynagi-ve-Yetkilendirme\" >G\u00fcven Kayna\u011f\u0131 ve Yetkilendirme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Guvenlik-Uygulamalari-ve-Erisim-Politikalari\" >G\u00fcvenlik Uygulamalar\u0131 ve Eri\u015fim Politikalar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Kullanim-Amaci-ve-Gecerlilik-Suresi\" >Kullan\u0131m Amac\u0131 ve Ge\u00e7erlilik S\u00fcresi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Guvenligin-Ihlal-Edilmesi-Durumundaki-Etkileri\" >G\u00fcvenli\u011fin \u0130hlal Edilmesi Durumundaki Etkileri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Hiyerarsik-Sertifika-Modelinin-Avantajlari\" >Hiyerar\u015fik Sertifika Modelinin Avantajlar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Guvenligin-Artirilmasi-Root-Anahtarinin-Korunmasi\" >G\u00fcvenli\u011fin Art\u0131r\u0131lmas\u0131: Root Anahtar\u0131n\u0131n Korunmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Esneklik-ve-Olceklenebilirlik\" >Esneklik ve \u00d6l\u00e7eklenebilirlik<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Yonetim-Kolayligi-Sertifika-Verme-ve-Iptal-Etme\" >Y\u00f6netim Kolayl\u0131\u011f\u0131: Sertifika Verme ve \u0130ptal Etme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Farkli-Guven-Seviyeleri-ve-Politikalarin-Uygulanabilmesi\" >Farkl\u0131 G\u00fcven Seviyeleri ve Politikalar\u0131n Uygulanabilmesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#SSL-Sertifikalari-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >SSL Sertifikalar\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Guvenilir-Sertifika-Otoriteleri-ile-Is-Ortakligi\" >G\u00fcvenilir Sertifika Otoriteleri ile \u0130\u015f Ortakl\u0131\u011f\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Genis-SSL-Sertifika-Yelpazesi-DV-OV-EV\" >Geni\u015f SSL Sertifika Yelpazesi (DV, OV, EV)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Uzman-Teknik-Destek-ve-Kolay-Kurulum-Surecleri\" >Uzman Teknik Destek ve Kolay Kurulum S\u00fcre\u00e7leri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/www.ihs.com.tr\/blog\/root-ca-ve-intermediate-ca-nedir\/#Rekabetci-Fiyatlandirma-ve-Musteri-Odakli-Hizmet-Anlayisi\" >Rekabet\u00e7i Fiyatland\u0131rma ve M\u00fc\u015fteri Odakl\u0131 Hizmet Anlay\u0131\u015f\u0131<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Public-Key-Infrastructure-PKI-ve-Sertifika-Otoritelerinin-Temelleri\"><\/span>Public Key Infrastructure (PKI) ve Sertifika Otoritelerinin Temelleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Dijital d\u00fcnyada g\u00fcvenli\u011fi sa\u011flamak, kimlikleri do\u011frulamak ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc korumak i\u00e7in tasarlanm\u0131\u015f kapsaml\u0131 bir sistem olan A\u00e7\u0131k Anahtar Altyap\u0131s\u0131 (PKI), modern siber g\u00fcvenli\u011fin temel ta\u015flar\u0131ndan biridir. Bu altyap\u0131, sertifikalar, anahtarlar ve otoriteler arac\u0131l\u0131\u011f\u0131yla karma\u015f\u0131k bir g\u00fcven a\u011f\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Public-Key-Infrastructure-PKI-Nedir\"><\/span>Public Key Infrastructure (PKI) Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A\u00e7\u0131k Anahtar Altyap\u0131s\u0131 (Public Key Infrastructure &#8211; PKI), dijital kimlikleri g\u00fcvenli bir \u015fekilde y\u00f6netmek ve do\u011frulamak i\u00e7in donan\u0131m, yaz\u0131l\u0131m, politika ve prosed\u00fcrlerden olu\u015fan bir b\u00fct\u00fcnd\u00fcr. Temel amac\u0131, taraflar aras\u0131nda g\u00fcvenli elektronik veri aktar\u0131m\u0131n\u0131 sa\u011flamakt\u0131r. PKI, her kullan\u0131c\u0131 i\u00e7in birbiriyle matematiksel olarak ili\u015fkili iki anahtar olu\u015fturur: biri herkese a\u00e7\u0131k olan &#8220;a\u00e7\u0131k anahtar&#8221; (public key), di\u011feri ise sadece kullan\u0131c\u0131 taraf\u0131ndan bilinen &#8220;\u00f6zel anahtar&#8221; (private key). A\u00e7\u0131k anahtar ile \u015fifrelenen bir veri, yaln\u0131zca ilgili \u00f6zel anahtar ile \u00e7\u00f6z\u00fclebilir. Bu asimetrik \u015fifreleme y\u00f6ntemi, dijital imzalar ve g\u00fcvenli ileti\u015fim kanallar\u0131 olu\u015fturman\u0131n temelini atar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dijital-Sertifika-Nedir-ve-Hangi-Bilgileri-Icerir\"><\/span>Dijital Sertifika Nedir ve Hangi Bilgileri \u0130\u00e7erir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Dijital sertifika, bir a\u00e7\u0131k anahtar\u0131 belirli bir kimli\u011fe (\u00f6rne\u011fin bir ki\u015fi, sunucu veya kurulu\u015f) ba\u011flayan elektronik bir belgedir. T\u0131pk\u0131 bir pasaportun kimli\u011finizi do\u011frulamas\u0131 gibi, dijital sertifika da bir web sitesinin veya sunucunun kimli\u011fini do\u011frular. Bu sertifikalar, g\u00fcvenilir bir \u00fc\u00e7\u00fcnc\u00fc taraf olan Sertifika Otoritesi (CA) taraf\u0131ndan imzalanarak ge\u00e7erlilik kazan\u0131r. Bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a>, bu yap\u0131n\u0131n en yayg\u0131n bilinen \u00f6rne\u011fidir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<caption>Bir Dijital Sertifikan\u0131n \u0130\u00e7erdi\u011fi Temel Bilgiler<\/caption>\n<thead>\n<tr>\n<th>Alan Ad\u0131 (Field)<\/th>\n<th>A\u00e7\u0131klama<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><b>S\u00fcr\u00fcm (Version)<\/b><\/td>\n<td>Sertifikan\u0131n standard\u0131n\u0131 (\u00f6rn. X.509 v3) belirtir.<\/td>\n<\/tr>\n<tr>\n<td><b>Seri Numaras\u0131 (Serial Number)<\/b><\/td>\n<td>Sertifikay\u0131 veren CA taraf\u0131ndan atanan benzersiz bir numarad\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><b>\u0130mza Algoritmas\u0131 (Signature Algorithm)<\/b><\/td>\n<td>Sertifikay\u0131 imzalamak i\u00e7in kullan\u0131lan kriptografik algoritmay\u0131 tan\u0131mlar.<\/td>\n<\/tr>\n<tr>\n<td><b>Sertifikay\u0131 Veren (Issuer)<\/b><\/td>\n<td>Sertifikay\u0131 imzalayan ve yay\u0131nlayan Sertifika Otoritesi&#8217;nin (CA) ad\u0131n\u0131 i\u00e7erir.<\/td>\n<\/tr>\n<tr>\n<td><b>Ge\u00e7erlilik Tarihleri (Validity Period)<\/b><\/td>\n<td>Sertifikan\u0131n ge\u00e7erli oldu\u011fu ba\u015flang\u0131\u00e7 ve biti\u015f tarihlerini belirtir.<\/td>\n<\/tr>\n<tr>\n<td><b>Konu (Subject)<\/b><\/td>\n<td>Sertifikan\u0131n kimin i\u00e7in d\u00fczenlendi\u011fini belirtir (\u00f6rn. web sitesinin alan ad\u0131).<\/td>\n<\/tr>\n<tr>\n<td><b>Konunun A\u00e7\u0131k Anahtar\u0131 (Subject&#8217;s Public Key)<\/b><\/td>\n<td>Sertifika sahibine ait olan a\u00e7\u0131k anahtar\u0131 i\u00e7erir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Sertifika-Otoritesi-CA-Nedir-ve-Gorevleri-Nelerdir\"><\/span>Sertifika Otoritesi (CA) Nedir ve G\u00f6revleri Nelerdir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sertifika Otoritesi (Certificate Authority &#8211; CA), dijital sertifikalar\u0131 d\u00fczenleyen, imzalayan, da\u011f\u0131tan ve iptal eden g\u00fcvenilir bir kurumdur. CA&#8217;ler, PKI hiyerar\u015fisinin temelini olu\u015fturur ve dijital kimliklerin do\u011frulu\u011funu garanti ederler. Bir CA&#8217;n\u0131n temel g\u00f6revleri \u015funlard\u0131r: bir sertifika ba\u015fvurusunda bulunan ki\u015fi veya kurumun kimli\u011fini do\u011frulamak, kimlik do\u011fruland\u0131ktan sonra dijital sertifikay\u0131 olu\u015fturup kendi \u00f6zel anahtar\u0131yla imzalamak ve s\u00fcresi dolan veya g\u00fcvenli\u011fi ihlal edilen sertifikalar\u0131n iptal listelerini (CRL) yay\u0131nlamak.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dijital-Guvende-Sertifika-Otoritelerinin-Rolu\"><\/span>Dijital G\u00fcvende Sertifika Otoritelerinin Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sertifika Otoriteleri, internetin g\u00fcvenilir bir ortam olmas\u0131n\u0131 sa\u011flayan kilit oyunculard\u0131r. Bir kullan\u0131c\u0131, CA taraf\u0131ndan imzalanm\u0131\u015f bir sertifikaya sahip bir web sitesine ba\u011fland\u0131\u011f\u0131nda, taray\u0131c\u0131s\u0131 bu imzay\u0131 tan\u0131r ve siteye g\u00fcvenebilece\u011fini anlar. E\u011fer bu g\u00fcven mekanizmas\u0131 olmasayd\u0131, herhangi bir k\u00f6t\u00fc niyetli ki\u015fi kendini me\u015fru bir web sitesi (\u00f6rne\u011fin bir banka) gibi tan\u0131tarak kullan\u0131c\u0131lar\u0131n hassas verilerini \u00e7alabilirdi. CA&#8217;ler, bu t\u00fcr sahtekarl\u0131klar\u0131 \u00f6nleyerek dijital g\u00fcvenin temelini olu\u015fturur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Kok-Sertifika-Otoritesi-Root-CA\"><\/span>K\u00f6k Sertifika Otoritesi (Root CA)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>PKI hiyerar\u015fisinin en tepesinde, t\u00fcm g\u00fcven modelinin ba\u015flang\u0131\u00e7 noktas\u0131n\u0131 olu\u015fturan K\u00f6k Sertifika Otoritesi (Root CA) yer al\u0131r. Bir Root CA, dijital d\u00fcnyadaki nihai g\u00fcven \u00e7\u0131pas\u0131d\u0131r ve onun g\u00fcvenilirli\u011fi t\u00fcm sistemin g\u00fcvenilirli\u011fini belirler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Root-CA-Nedir\"><\/span>Root CA Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Root CA, sertifika g\u00fcven zincirinin en \u00fcst\u00fcnde yer alan ve kendisine mutlak g\u00fcven duyulan Sertifika Otoritesi&#8217;dir. Di\u011fer t\u00fcm sertifikalar\u0131n (Ara ve Son Kullan\u0131c\u0131) g\u00fcvenilirli\u011fi, dolayl\u0131 olarak bu k\u00f6k sertifikaya dayan\u0131r. Bir Root CA&#8217;n\u0131n \u00f6zel anahtar\u0131 (private key) ele ge\u00e7irilirse, bu anahtarla imzalanm\u0131\u015f t\u00fcm sertifikalar ve bu sertifikalara ba\u011fl\u0131 t\u00fcm hiyerar\u015fi tehlikeye girer. Bu nedenle Root CA&#8217;ler, son derece y\u00fcksek g\u00fcvenlik \u00f6nlemleri alt\u0131nda korunur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Root-CAlerin-Ozellikleri-Kendinden-Imzali-Self-Signed-Olma\"><\/span>Root CA\u2019lerin \u00d6zellikleri: Kendinden \u0130mzal\u0131 (Self-Signed) Olma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Root CA sertifikalar\u0131n\u0131n en belirgin \u00f6zelli\u011fi &#8220;kendinden imzal\u0131&#8221; (self-signed) olmalar\u0131d\u0131r. Hiyerar\u015finin en tepesinde olduklar\u0131 i\u00e7in onlar\u0131 imzalayacak daha \u00fcst bir otorite yoktur. Bu nedenle, bir Root CA, kendi a\u00e7\u0131k anahtar\u0131n\u0131 kendi \u00f6zel anahtar\u0131yla imzalayarak sertifikas\u0131n\u0131 olu\u015fturur. Bu durum, onlar\u0131n g\u00fcvenilirli\u011finin teknik bir do\u011frulamadan ziyade, taray\u0131c\u0131 ve i\u015fletim sistemi \u00fcreticileri taraf\u0131ndan yap\u0131lan titiz denetimler ve g\u00fcvene dayal\u0131 bir kabul s\u00fcrecine ba\u011fl\u0131 oldu\u011fu anlam\u0131na gelir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kok-Sertifikalarin-Isletim-Sistemleri-ve-Tarayicilara-Dahil-Edilmesi-Trust-Store\"><\/span>K\u00f6k Sertifikalar\u0131n \u0130\u015fletim Sistemleri ve Taray\u0131c\u0131lara Dahil Edilmesi (Trust Store)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir Root CA&#8217;n\u0131n sertifikas\u0131n\u0131n g\u00fcvenilir kabul edilmesi i\u00e7in, bu sertifikan\u0131n i\u015fletim sistemleri (Windows, macOS, Linux) ve web taray\u0131c\u0131lar\u0131 (Chrome, Firefox, Safari) taraf\u0131ndan tan\u0131nmas\u0131 gerekir. Bu yaz\u0131l\u0131m \u00fcreticileri, &#8220;g\u00fcven deposu&#8221; (trust store) veya &#8220;k\u00f6k program\u0131&#8221; (root program) ad\u0131 verilen listelere, s\u0131k\u0131 g\u00fcvenlik denetimlerinden ge\u00e7irdikleri Root CA&#8217;lerin sertifikalar\u0131n\u0131 eklerler. Cihaz\u0131n\u0131za \u00f6nceden y\u00fcklenmi\u015f olarak gelen bu k\u00f6k sertifikalar, g\u00fcven zincirinin ba\u015flang\u0131\u00e7 noktas\u0131n\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Root-CAlerin-Guvenligi-Cevrimdisi-Tutulma-ve-Fiziksel-Koruma\"><\/span>Root CA\u2019lerin G\u00fcvenli\u011fi: \u00c7evrimd\u0131\u015f\u0131 Tutulma ve Fiziksel Koruma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Root CA&#8217;lerin \u00f6zel anahtarlar\u0131, t\u00fcm PKI sisteminin en de\u011ferli varl\u0131\u011f\u0131d\u0131r. Bu anahtarlar\u0131n g\u00fcvenli\u011fini sa\u011flamak i\u00e7in Root CA&#8217;ler genellikle &#8220;\u00e7evrimd\u0131\u015f\u0131&#8221; (offline) tutulur. Bu, Root CA&#8217;yi bar\u0131nd\u0131ran sunucular\u0131n internete veya herhangi bir a\u011fa ba\u011fl\u0131 olmad\u0131\u011f\u0131 anlam\u0131na gelir. Anahtarlar, Hardware Security Module (HSM) ad\u0131 verilen \u00f6zel donan\u0131mlarda saklan\u0131r ve bu donan\u0131mlar, y\u00fcksek g\u00fcvenlikli, fiziksel eri\u015fimin k\u0131s\u0131tl\u0131 oldu\u011fu veri merkezlerinde korunur. Root CA, yaln\u0131zca yeni bir Ara Sertifika Otoritesi&#8217;ni (Intermediate CA) imzalamak gibi \u00e7ok nadir ve planl\u0131 durumlarda k\u0131sa bir s\u00fcreli\u011fine \u00e7evrimi\u00e7i hale getirilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ara-Sertifika-Otoritesi-Intermediate-CA\"><\/span>Ara Sertifika Otoritesi (Intermediate CA)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Root CA&#8217;n\u0131n g\u00fcvenli\u011fini en \u00fcst d\u00fczeyde tutmak ve g\u00fcnl\u00fck sertifika y\u00f6netimi operasyonlar\u0131n\u0131 daha esnek hale getirmek i\u00e7in PKI hiyerar\u015fisinde Ara Sertifika Otoriteleri (Intermediate CA) kullan\u0131l\u0131r. Bu otoriteler, k\u00f6k ve son kullan\u0131c\u0131 aras\u0131nda bir tampon g\u00f6revi g\u00f6r\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Intermediate-CA-Nedir\"><\/span>Intermediate CA Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ara Sertifika Otoritesi (Intermediate CA), g\u00fcven zincirinde K\u00f6k Sertifika Otoritesi (Root CA) ile son kullan\u0131c\u0131 sertifikalar\u0131 (\u00f6rne\u011fin bir web sitesinin SSL sertifikas\u0131) aras\u0131nda yer alan bir otoritedir. Intermediate CA&#8217;ler, do\u011frudan Root CA taraf\u0131ndan imzalanarak yetkilendirilirler. Bu yetki sayesinde, son kullan\u0131c\u0131lar i\u00e7in sertifika d\u00fczenleme, imzalama ve iptal etme gibi g\u00fcnl\u00fck operasyonel g\u00f6revleri yerine getirebilirler.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Intermediate-CAlerin-Olusturulma-Amaci-Root-CAyi-Korumak\"><\/span>Intermediate CA\u2019lerin Olu\u015fturulma Amac\u0131: Root CA&#8217;yi Korumak<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Intermediate CA&#8217;lerin var olmas\u0131n\u0131n en temel nedeni, Root CA&#8217;n\u0131n \u00f6zel anahtar\u0131n\u0131 korumakt\u0131r. Root CA&#8217;n\u0131n \u00f6zel anahtar\u0131, en de\u011ferli ve en hassas bile\u015fendir. E\u011fer t\u00fcm son kullan\u0131c\u0131 sertifikalar\u0131 do\u011frudan Root CA taraf\u0131ndan imzalansayd\u0131, Root CA&#8217;n\u0131n s\u00fcrekli olarak \u00e7evrimi\u00e7i olmas\u0131 ve aktif olarak kullan\u0131lmas\u0131 gerekirdi. Bu durum, anahtar\u0131n siber sald\u0131r\u0131lara maruz kalma riskini dramatik bir \u015fekilde art\u0131r\u0131rd\u0131. Intermediate CA&#8217;ler bu riski ortadan kald\u0131r\u0131r. G\u00fcnl\u00fck i\u015flemler Intermediate CA taraf\u0131ndan y\u00fcr\u00fct\u00fcl\u00fcrken, Root CA g\u00fcvenli bir \u015fekilde \u00e7evrimd\u0131\u015f\u0131 kal\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Root-CA-Tarafindan-Imzalanarak-Yetkilendirilmesi\"><\/span>Root CA Taraf\u0131ndan \u0130mzalanarak Yetkilendirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir Intermediate CA&#8217;n\u0131n sertifikas\u0131, kendinden imzal\u0131 de\u011fildir. Bunun yerine, hiyerar\u015fide bir \u00fcst katmanda bulunan Root CA taraf\u0131ndan imzalan\u0131r. Bu imza, Intermediate CA&#8217;e sertifika d\u00fczenleme yetkisi verir ve onu g\u00fcven zincirinin me\u015fru bir par\u00e7as\u0131 haline getirir. Bir taray\u0131c\u0131, bir Intermediate CA taraf\u0131ndan imzalanm\u0131\u015f bir son kullan\u0131c\u0131 sertifikas\u0131n\u0131 kontrol etti\u011finde, bir sonraki ad\u0131m olarak Intermediate CA&#8217;n\u0131n sertifikas\u0131n\u0131n ge\u00e7erli bir Root CA taraf\u0131ndan imzalan\u0131p imzalanmad\u0131\u011f\u0131n\u0131 kontrol eder. Bu i\u015flem, g\u00fcvenin k\u00f6ke kadar takip edilmesini sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Birden-Fazla-Ara-Sertifika-Katmani-Kullanimi-ve-Nedenleri\"><\/span>Birden Fazla Ara Sertifika Katman\u0131 Kullan\u0131m\u0131 ve Nedenleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Baz\u0131 durumlarda, g\u00fcven zincirinde birden fazla Intermediate CA katman\u0131 bulunabilir. \u00d6rne\u011fin, bir Root CA, farkl\u0131 co\u011frafi b\u00f6lgeler veya farkl\u0131 sertifika t\u00fcrleri (\u00f6rne\u011fin, <a href=\"https:\/\/www.ihs.com.tr\/blog\/dv-ov-ve-ev-ssl-sertifika-turleri-arasindaki-farklar-nelerdir\/\" target=\"_blank\">DV, OV, EV sertifikalar\u0131<\/a>) i\u00e7in farkl\u0131 Intermediate CA&#8217;leri yetkilendirebilir. Bu Intermediate CA&#8217;ler de kendi altlar\u0131nda ba\u015fka Intermediate CA&#8217;ler olu\u015fturabilir. Bu \u00e7ok katmanl\u0131 yap\u0131, b\u00fcy\u00fck ve k\u00fcresel Sertifika Otoritelerine y\u00f6netimsel esneklik, \u00f6l\u00e7eklenebilirlik ve politika ayr\u0131m\u0131 yapma imkan\u0131 tan\u0131r. \u00d6rne\u011fin, bir alt CA&#8217;n\u0131n g\u00fcvenli\u011fi ihlal edilirse, sadece o dal ve alt\u0131ndaki sertifikalar etkilenir, t\u00fcm yap\u0131 \u00e7\u00f6kmez.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Guven-Zinciri-Chain-of-Trust-ve-Hiyerarsik-Yapi\"><\/span>G\u00fcven Zinciri (Chain of Trust) ve Hiyerar\u015fik Yap\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Bir web sitesinin g\u00fcvenli oldu\u011funu belirten asma kilit simgesinin ard\u0131nda, &#8220;G\u00fcven Zinciri&#8221; olarak bilinen ve sertifikalar\u0131n hiyerar\u015fik bir yap\u0131da birbirini do\u011frulad\u0131\u011f\u0131 bir sistem yatar. Bu zincir, son kullan\u0131c\u0131 sertifikas\u0131ndan ba\u015flayarak g\u00fcvenilir bir k\u00f6ke ula\u015fana kadar devam eder.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guven-Zinciri-Nedir-ve-Nasil-Calisir\"><\/span>G\u00fcven Zinciri Nedir ve Nas\u0131l \u00c7al\u0131\u015f\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcven Zinciri (Chain of Trust), bir dijital sertifikan\u0131n ge\u00e7erlili\u011fini, o sertifikay\u0131 imzalayan otoritenin sertifikas\u0131na ve nihayetinde cihaz\u0131n\u0131z\u0131n g\u00fcvendi\u011fi bir K\u00f6k Sertifika Otoritesi&#8217;ne (Root CA) ba\u011flayan hiyerar\u015fik bir yoldur. Bir taray\u0131c\u0131 veya istemci, bir son kullan\u0131c\u0131 sertifikas\u0131n\u0131 do\u011frularken, bu sertifikay\u0131 kimin imzalad\u0131\u011f\u0131na bakar (genellikle bir Intermediate CA). Ard\u0131ndan, o Intermediate CA&#8217;n\u0131n sertifikas\u0131n\u0131 kimin imzalad\u0131\u011f\u0131n\u0131 kontrol eder ve bu i\u015flemi, cihaz\u0131n g\u00fcven deposunda (trust store) bulunan bir Root CA sertifikas\u0131na ula\u015fana kadar tekrarlar. E\u011fer zincirin her halkas\u0131 ge\u00e7erliyse ve son halka g\u00fcvenilir bir k\u00f6ke ba\u011flan\u0131yorsa, sertifika ve dolay\u0131s\u0131yla web sitesi g\u00fcvenli kabul edilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sertifika-Zincirinin-Katmanlari\"><\/span>Sertifika Zincirinin Katmanlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tipik bir g\u00fcven zinciri \u00fc\u00e7 ana katmandan olu\u015fur. Her katman, bir alt\u0131ndaki katman\u0131 imzalayarak ona yetki ve g\u00fcvenilirlik aktar\u0131r.<\/p>\n<h4>K\u00f6k Sertifika (Root Certificate)<\/h4>\n<p>Zincirin en \u00fcst halkas\u0131d\u0131r. Kendinden imzal\u0131d\u0131r ve i\u015fletim sistemleri ile taray\u0131c\u0131lar\u0131n g\u00fcven depolar\u0131nda \u00f6nceden y\u00fcklenmi\u015f olarak bulunur. T\u00fcm g\u00fcven modelinin ba\u015flang\u0131\u00e7 noktas\u0131d\u0131r ve mutlak g\u00fcveni temsil eder.<\/p>\n<h4>Ara Sertifika(lar) (Intermediate Certificate(s))<\/h4>\n<p>Zincirin orta katman(lar)\u0131d\u0131r. K\u00f6k Sertifika taraf\u0131ndan imzalan\u0131r ve son kullan\u0131c\u0131 sertifikalar\u0131n\u0131 imzalamakla g\u00f6revlidirler. Root CA&#8217;y\u0131 korumak ve sertifika y\u00f6netimini kolayla\u015ft\u0131rmak i\u00e7in kullan\u0131l\u0131rlar. Bir zincirde bir veya daha fazla ara sertifika bulunabilir.<\/p>\n<h4>Son Kullan\u0131c\u0131 Sertifikas\u0131 (End-Entity\/Server Certificate)<\/h4>\n<p>Zincirin en alt halkas\u0131d\u0131r. Bir Ara Sertifika taraf\u0131ndan imzalan\u0131r ve belirli bir <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">alan ad\u0131<\/a> (domain) i\u00e7in d\u00fczenlenir. Bir web sitesine ba\u011fland\u0131\u011f\u0131n\u0131zda taray\u0131c\u0131n\u0131z\u0131n ilk kar\u015f\u0131la\u015ft\u0131\u011f\u0131 ve do\u011frulama s\u00fcrecini ba\u015flatt\u0131\u011f\u0131 sertifika budur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hiyerarsinin-Sagladigi-Guven-Modelinin-Incelenmesi\"><\/span>Hiyerar\u015finin Sa\u011flad\u0131\u011f\u0131 G\u00fcven Modelinin \u0130ncelenmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu hiyerar\u015fik yap\u0131, merkezi ve \u00f6l\u00e7eklenebilir bir g\u00fcven modeli sunar. Tek bir Root CA&#8217;ya g\u00fcvenmek yerine, binlerce son kullan\u0131c\u0131 sertifikas\u0131na do\u011frudan g\u00fcvenmek zorunda kalmay\u0131z. G\u00fcven, k\u00f6kten dallara do\u011fru delege edilir. Bu model, bir g\u00fcvenlik ihlali durumunda hasar\u0131n s\u0131n\u0131rland\u0131r\u0131lmas\u0131na da olanak tan\u0131r. \u00d6rne\u011fin, bir Intermediate CA&#8217;n\u0131n anahtar\u0131 \u00e7al\u0131n\u0131rsa, sadece o Intermediate CA taraf\u0131ndan verilen sertifikalar iptal edilir. Root CA&#8217;n\u0131n kendisi g\u00fcvende kald\u0131\u011f\u0131 i\u00e7in t\u00fcm sistemin \u00e7\u00f6kmesi engellenmi\u015f olur. Bu yap\u0131, internetin b\u00fcy\u00fckl\u00fc\u011f\u00fc ve karma\u015f\u0131kl\u0131\u011f\u0131 d\u00fc\u015f\u00fcn\u00fcld\u00fc\u011f\u00fcnde, y\u00f6netilebilir ve dayan\u0131kl\u0131 bir g\u00fcvenlik altyap\u0131s\u0131 sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Sertifika-Zincirinin-Tarayicilar-Tarafindan-Dogrulanma-Sureci\"><\/span>Sertifika Zincirinin Taray\u0131c\u0131lar Taraf\u0131ndan Do\u011frulanma S\u00fcreci<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Bir web sitesini ziyaret etti\u011finizde, taray\u0131c\u0131n\u0131z saniyeler i\u00e7inde karma\u015f\u0131k bir do\u011frulama s\u00fcreci i\u015fleterek ba\u011flant\u0131n\u0131z\u0131n g\u00fcvenli olup olmad\u0131\u011f\u0131na karar verir. Bu s\u00fcre\u00e7, sunucudan gelen sertifika zincirinin dikkatli bir \u015fekilde incelenmesine dayan\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Bir-Web-Sitesine-Baglanildiginda-Gerceklesen-Adimlar\"><\/span>Bir Web Sitesine Ba\u011flan\u0131ld\u0131\u011f\u0131nda Ger\u00e7ekle\u015fen Ad\u0131mlar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTPS ile korunan bir web sitesine ba\u011fland\u0131\u011f\u0131n\u0131zda, taray\u0131c\u0131n\u0131z ve sunucu aras\u0131nda &#8220;SSL\/TLS Handshake&#8221; ad\u0131 verilen bir s\u00fcre\u00e7 ba\u015flar. Bu s\u00fcrecin bir par\u00e7as\u0131 olarak, web sunucusu kendi son kullan\u0131c\u0131 sertifikas\u0131n\u0131 ve onu imzalayan ara sertifika(lar)\u0131 taray\u0131c\u0131n\u0131za g\u00f6nderir. Taray\u0131c\u0131n\u0131z bu sertifika zincirini alarak do\u011frulama i\u015flemine ba\u015flar. Bu i\u015flem, dijital d\u00fcnyan\u0131n en temel g\u00fcvenlik kontrollerinden biridir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Son-Kullanici-Sertifikasindan-Kok-Sertifikaya-Geriye-Donuk-Kontrol\"><\/span>Son Kullan\u0131c\u0131 Sertifikas\u0131ndan K\u00f6k Sertifikaya Geriye D\u00f6n\u00fck Kontrol<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Taray\u0131c\u0131, do\u011frulama i\u015flemine zincirin en alt\u0131ndan, yani sunucunun g\u00f6nderdi\u011fi son kullan\u0131c\u0131 sertifikas\u0131ndan ba\u015flar. \u015eu kontrolleri ad\u0131m ad\u0131m ger\u00e7ekle\u015ftirir:<\/p>\n<ol>\n<li>Son kullan\u0131c\u0131 sertifikas\u0131n\u0131n imzas\u0131n\u0131n ge\u00e7erli olup olmad\u0131\u011f\u0131n\u0131 ve sertifikay\u0131 imzalayan ara sertifikan\u0131n a\u00e7\u0131k anahtar\u0131yla e\u015fle\u015fip e\u015fle\u015fmedi\u011fini kontrol eder.<\/li>\n<li>Sertifikan\u0131n ge\u00e7erlilik s\u00fcresinin dolup dolmad\u0131\u011f\u0131n\u0131 kontrol eder.<\/li>\n<li>Sertifikadaki alan ad\u0131n\u0131n (Common Name\/Subject Alternative Name), ziyaret etti\u011finiz web sitesinin adresiyle e\u015fle\u015fip e\u015fle\u015fmedi\u011fini do\u011frular.<\/li>\n<li>Bir \u00fcst katmana \u00e7\u0131karak ara sertifikan\u0131n imzas\u0131n\u0131, onu imzalayan \u00fcst otoritenin (ba\u015fka bir ara veya k\u00f6k sertifika) a\u00e7\u0131k anahtar\u0131yla do\u011frular.<\/li>\n<li>Bu geriye d\u00f6n\u00fck kontrol i\u015flemini, cihaz\u0131n g\u00fcven deposunda (trust store) kay\u0131tl\u0131 olan ve g\u00fcvenilir olarak kabul edilen bir k\u00f6k sertifikaya ula\u015fana kadar devam ettirir.<\/li>\n<\/ol>\n<p>E\u011fer her ad\u0131m ba\u015far\u0131l\u0131 olursa ve zincir g\u00fcvenilir bir k\u00f6kte son bulursa, sertifika ge\u00e7erli kabul edilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sertifika-Iptal-Listeleri-CRL-ve-OCSP-Protokolunun-Rolu\"><\/span>Sertifika \u0130ptal Listeleri (CRL) ve OCSP Protokol\u00fcn\u00fcn Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir sertifikan\u0131n ge\u00e7erlilik s\u00fcresi dolmam\u0131\u015f olsa bile, \u00f6zel anahtar\u0131n\u0131n \u00e7al\u0131nmas\u0131 gibi nedenlerle g\u00fcvenli\u011fi ihlal edilmi\u015f olabilir. Bu durumda sertifikan\u0131n derhal iptal edilmesi gerekir. Taray\u0131c\u0131lar, bir sertifikan\u0131n iptal edilip edilmedi\u011fini kontrol etmek i\u00e7in iki temel mekanizma kullan\u0131r:<\/p>\n<ul>\n<li><b>Sertifika \u0130ptal Listesi (CRL &#8211; Certificate Revocation List):<\/b> Sertifika Otoritesi taraf\u0131ndan yay\u0131nlanan ve iptal edilmi\u015f t\u00fcm sertifikalar\u0131n seri numaralar\u0131n\u0131 i\u00e7eren bir listedir. Taray\u0131c\u0131lar bu listeyi indirip kontrol edebilir, ancak b\u00fcy\u00fck ve yava\u015f g\u00fcncellenen listeler performans\u0131 olumsuz etkileyebilir.<\/li>\n<li><b>\u00c7evrimi\u00e7i Sertifika Durum Protokol\u00fc (OCSP &#8211; Online Certificate Status Protocol):<\/b> CRL&#8217;ye daha h\u0131zl\u0131 bir alternatiftir. Taray\u0131c\u0131, sertifikan\u0131n seri numaras\u0131n\u0131 CA&#8217;n\u0131n OCSP sunucusuna g\u00f6nderir ve &#8220;ge\u00e7erli&#8221;, &#8220;iptal edilmi\u015f&#8221; veya &#8220;bilinmiyor&#8221; \u015feklinde anl\u0131k bir yan\u0131t al\u0131r. Bu y\u00f6ntem, \u00f6zellikle y\u00fcksek trafikli siteler i\u00e7in daha verimlidir.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Basarili-ve-Basarisiz-Dogrulama-Senaryolari-GuvenliGuvensiz-Baglanti-Uyarilari\"><\/span>Ba\u015far\u0131l\u0131 ve Ba\u015far\u0131s\u0131z Do\u011frulama Senaryolar\u0131 (G\u00fcvenli\/G\u00fcvensiz Ba\u011flant\u0131 Uyar\u0131lar\u0131)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Do\u011frulama s\u00fcreci ba\u015far\u0131yla tamamland\u0131\u011f\u0131nda, taray\u0131c\u0131n\u0131z adres \u00e7ubu\u011funda bir asma kilit simgesi g\u00f6sterir ve ba\u011flant\u0131n\u0131n g\u00fcvenli oldu\u011funu belirtir. Bu, site kimli\u011finin do\u011fruland\u0131\u011f\u0131 ve verilerinizin \u015fifrelendi\u011fi anlam\u0131na gelir. Ancak, do\u011frulama s\u00fcrecinde herhangi bir ad\u0131m ba\u015far\u0131s\u0131z olursa (\u00f6rne\u011fin, sertifika s\u00fcresi dolmu\u015fsa, imza ge\u00e7ersizse, zincir g\u00fcvenilir bir k\u00f6ke ba\u011flanm\u0131yorsa veya sertifika iptal edilmi\u015fse), taray\u0131c\u0131n\u0131z &#8220;Ba\u011flant\u0131n\u0131z gizli de\u011fil&#8221; veya &#8220;G\u00fcvenli olmayan ba\u011flant\u0131&#8221; gibi ciddi bir uyar\u0131 ekran\u0131 g\u00f6stererek sizi potansiyel tehlikelere kar\u015f\u0131 korur. Bu uyar\u0131lar, <a href=\"https:\/\/www.ihs.com.tr\/blog\/siber-guvenlik-nedir-siber-guvenlik-nasil-saglanir\/\" target=\"_blank\">siber g\u00fcvenlik<\/a> a\u00e7\u0131s\u0131ndan kritik \u00f6neme sahiptir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Root-CA-ve-Intermediate-CA-Arasindaki-Temel-Farkliliklar\"><\/span>Root CA ve Intermediate CA Aras\u0131ndaki Temel Farkl\u0131l\u0131klar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Her ikisi de Sertifika Otoritesi olmas\u0131na ra\u011fmen, Root CA ve Intermediate CA&#8217;ler PKI hiyerar\u015fisinde farkl\u0131 roller \u00fcstlenir, farkl\u0131 g\u00fcvenlik politikalar\u0131na tabidir ve bir ihlal durumunda farkl\u0131 etkilere neden olurlar. Bu temel farkl\u0131l\u0131klar\u0131 anlamak, g\u00fcven zincirinin nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 kavramak i\u00e7in kritiktir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<caption>Root CA ve Intermediate CA Kar\u015f\u0131la\u015ft\u0131rmas\u0131<\/caption>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>K\u00f6k Sertifika Otoritesi (Root CA)<\/th>\n<th>Ara Sertifika Otoritesi (Intermediate CA)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><b>G\u00fcven Kayna\u011f\u0131<\/b><\/td>\n<td>Kendinden imzal\u0131d\u0131r (self-signed). G\u00fcveni kendisinden ba\u015flar.<\/td>\n<td>Bir Root CA veya ba\u015fka bir Intermediate CA taraf\u0131ndan imzalan\u0131r. G\u00fcveni \u00fcst otoriteden gelir.<\/td>\n<\/tr>\n<tr>\n<td><b>G\u00fcvenlik ve Eri\u015fim<\/b><\/td>\n<td>Maksimum g\u00fcvenlik. Genellikle \u00e7evrimd\u0131\u015f\u0131 (offline) tutulur. Fiziksel koruma esast\u0131r.<\/td>\n<td>Y\u00fcksek g\u00fcvenlik. Ancak sertifika verme i\u015flemleri i\u00e7in \u00e7evrimi\u00e7i (online) olmak zorundad\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><b>Kullan\u0131m Amac\u0131<\/b><\/td>\n<td>Yaln\u0131zca Intermediate CA&#8217;leri imzalamak ve yetkilendirmek i\u00e7in kullan\u0131l\u0131r.<\/td>\n<td>Son kullan\u0131c\u0131 sertifikalar\u0131n\u0131 (\u00f6rn. SSL\/TLS) imzalamak, y\u00f6netmek ve iptal etmek i\u00e7in kullan\u0131l\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><b>Ge\u00e7erlilik S\u00fcresi<\/b><\/td>\n<td>\u00c7ok uzun (genellikle 10-20 y\u0131l veya daha fazla).<\/td>\n<td>Daha k\u0131sa (genellikle 1-10 y\u0131l aras\u0131nda).<\/td>\n<\/tr>\n<tr>\n<td><b>\u0130hlal Durumundaki Etki<\/b><\/td>\n<td>Felakettir. T\u00fcm hiyerar\u015finin g\u00fcvenilirli\u011fi sars\u0131l\u0131r ve ona ba\u011fl\u0131 t\u00fcm sertifikalar ge\u00e7ersiz hale gelir.<\/td>\n<td>Ciddidir, ancak kontrol alt\u0131na al\u0131nabilir. Sadece o Intermediate CA taraf\u0131ndan verilen sertifikalar etkilenir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Guven-Kaynagi-ve-Yetkilendirme\"><\/span>G\u00fcven Kayna\u011f\u0131 ve Yetkilendirme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En temel fark g\u00fcvenin ba\u015flang\u0131\u00e7 noktas\u0131d\u0131r. Root CA, g\u00fcven zincirinin alfabesidir; g\u00fcvenilirli\u011fi sorgulanmaz, kabul edilir ve sertifikas\u0131 kendinden imzal\u0131d\u0131r. Buna kar\u015f\u0131l\u0131k, bir Intermediate CA&#8217;n\u0131n g\u00fcvenilirli\u011fi ve yetkisi, kendisini imzalayan Root CA&#8217;dan gelir. Yani, Root CA g\u00fcveni &#8220;yarat\u0131rken&#8221;, Intermediate CA bu g\u00fcveni &#8220;aktar\u0131r&#8221;.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenlik-Uygulamalari-ve-Erisim-Politikalari\"><\/span>G\u00fcvenlik Uygulamalar\u0131 ve Eri\u015fim Politikalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Root CA&#8217;n\u0131n \u00f6zel anahtar\u0131, krall\u0131\u011f\u0131n anahtar\u0131 gibidir ve bu nedenle en s\u0131k\u0131 g\u00fcvenlik \u00f6nlemleriyle korunur. Genellikle a\u011f ba\u011flant\u0131s\u0131 olmayan, fiziksel olarak korunan donan\u0131m g\u00fcvenlik mod\u00fcllerinde (HSM) saklan\u0131r ve \u00e7ok nadiren kullan\u0131l\u0131r. Intermediate CA&#8217;ler ise g\u00fcnl\u00fck operasyonlar\u0131n bir par\u00e7as\u0131d\u0131r. Son kullan\u0131c\u0131 sertifikalar\u0131n\u0131 d\u00fczenlemek i\u00e7in s\u00fcrekli olarak \u00e7evrimi\u00e7i ve eri\u015filebilir olmalar\u0131 gerekir. Bu nedenle, daha fazla sald\u0131r\u0131 y\u00fczeyine sahip olsalar da, bir ihlal durumunda zarar\u0131n s\u0131n\u0131rl\u0131 kalaca\u011f\u0131 bir tampon b\u00f6lge olu\u015ftururlar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kullanim-Amaci-ve-Gecerlilik-Suresi\"><\/span>Kullan\u0131m Amac\u0131 ve Ge\u00e7erlilik S\u00fcresi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Root CA&#8217;n\u0131n birincil ve neredeyse tek amac\u0131, kendisine ba\u011fl\u0131 Intermediate CA&#8217;leri olu\u015fturmak ve onlara yetki vermektir. Bu nadir bir i\u015flem oldu\u011fundan, Root CA sertifikalar\u0131 10 ila 20 y\u0131l gibi \u00e7ok uzun ge\u00e7erlilik s\u00fcrelerine sahip olacak \u015fekilde tasarlan\u0131r. Intermediate CA&#8217;ler ise s\u00fcrekli olarak son kullan\u0131c\u0131 sertifikalar\u0131 d\u00fczenler. Bu operasyonel do\u011falar\u0131 gere\u011fi, sertifikalar\u0131n\u0131n ge\u00e7erlilik s\u00fcreleri daha k\u0131sad\u0131r, bu da potansiyel g\u00fcvenlik risklerinin zamanla s\u0131n\u0131rlanmas\u0131na yard\u0131mc\u0131 olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenligin-Ihlal-Edilmesi-Durumundaki-Etkileri\"><\/span>G\u00fcvenli\u011fin \u0130hlal Edilmesi Durumundaki Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir Intermediate CA&#8217;n\u0131n g\u00fcvenli\u011finin ihlal edilmesi ciddi bir olayd\u0131r, ancak y\u00f6netilebilir bir krizdir. Etkilenen Intermediate CA ve onun taraf\u0131ndan verilen t\u00fcm sertifikalar iptal edilebilir, ancak Root CA g\u00fcvende kald\u0131\u011f\u0131 i\u00e7in sistemin geri kalan\u0131 \u00e7al\u0131\u015fmaya devam eder. Ancak bir Root CA&#8217;n\u0131n \u00f6zel anahtar\u0131n\u0131n ele ge\u00e7irilmesi, n\u00fckleer bir felakete e\u015fde\u011ferdir. Bu, o k\u00f6ke ba\u011fl\u0131 t\u00fcm g\u00fcven zincirinin \u00e7\u00f6kmesi anlam\u0131na gelir ve taray\u0131c\u0131\/i\u015fletim sistemi \u00fcreticilerinin acil bir g\u00fcncellemeyle o k\u00f6k sertifikay\u0131 g\u00fcvenilir listelerinden \u00e7\u0131karmas\u0131n\u0131 gerektirir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Hiyerarsik-Sertifika-Modelinin-Avantajlari\"><\/span>Hiyerar\u015fik Sertifika Modelinin Avantajlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Root CA ve Intermediate CA&#8217;lerden olu\u015fan bu \u00e7ok katmanl\u0131 yap\u0131, rastgele bir tasar\u0131m tercihi de\u011fildir. \u0130nternet \u00f6l\u00e7e\u011finde g\u00fcvenli\u011fi, esnekli\u011fi ve y\u00f6netilebilirli\u011fi sa\u011flamak i\u00e7in bilin\u00e7li olarak olu\u015fturulmu\u015f bir modeldir. Bu hiyerar\u015fik yap\u0131, dijital g\u00fcven altyap\u0131s\u0131na bir dizi kritik avantaj sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenligin-Artirilmasi-Root-Anahtarinin-Korunmasi\"><\/span>G\u00fcvenli\u011fin Art\u0131r\u0131lmas\u0131: Root Anahtar\u0131n\u0131n Korunmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Modelin en b\u00fcy\u00fck avantaj\u0131, en de\u011ferli varl\u0131k olan Root CA&#8217;n\u0131n \u00f6zel anahtar\u0131n\u0131 korumas\u0131d\u0131r. Root CA&#8217;y\u0131 \u00e7evrimd\u0131\u015f\u0131 ve izole tutarak, g\u00fcnl\u00fck operasyonlar\u0131n riskleri Intermediate CA&#8217;lere devredilir. Bu, &#8220;sald\u0131r\u0131 y\u00fczeyini&#8221; \u00f6nemli \u00f6l\u00e7\u00fcde azalt\u0131r. Bir Intermediate CA&#8217;n\u0131n g\u00fcvenli\u011fi ihlal edilse bile, bu durum t\u00fcm sistemi \u00e7\u00f6kertmez. Kriz, etkilenen dal ile s\u0131n\u0131rl\u0131 kal\u0131r ve Root CA g\u00fcvende oldu\u011fu s\u00fcrece sistemin geneli g\u00fcvenilirli\u011fini korur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Esneklik-ve-Olceklenebilirlik\"><\/span>Esneklik ve \u00d6l\u00e7eklenebilirlik<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Hiyerar\u015fik yap\u0131, Sertifika Otoritelerine b\u00fcy\u00fck bir esneklik ve \u00f6l\u00e7eklenebilirlik sa\u011flar. K\u00fcresel bir CA, farkl\u0131 ama\u00e7lar i\u00e7in farkl\u0131 Intermediate CA&#8217;ler olu\u015fturabilir. \u00d6rne\u011fin;<\/p>\n<ul>\n<li><b>\u00dcr\u00fcn Tipine G\u00f6re:<\/b> EV (Geni\u015fletilmi\u015f Do\u011frulama), OV (Kurulu\u015f Do\u011frulamas\u0131) ve DV (Alan Ad\u0131 Do\u011frulamas\u0131) sertifikalar\u0131 i\u00e7in ayr\u0131 ara otoriteler kullan\u0131labilir.<\/li>\n<li><b>Co\u011frafi B\u00f6lgeye G\u00f6re:<\/b> Farkl\u0131 \u00fclkelerdeki veya b\u00f6lgelerdeki operasyonlar\u0131 y\u00f6netmek i\u00e7in yerel ara otoriteler olu\u015fturulabilir.<\/li>\n<li><b>M\u00fc\u015fteri Tipine G\u00f6re:<\/b> B\u00fcy\u00fck kurumsal m\u00fc\u015fteriler veya belirli i\u015f ortaklar\u0131 i\u00e7in \u00f6zel ara otoriteler tan\u0131mlanabilir.<\/li>\n<\/ul>\n<p>Bu yap\u0131, milyonlarca sertifikay\u0131 verimli bir \u015fekilde y\u00f6netmeyi m\u00fcmk\u00fcn k\u0131lar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yonetim-Kolayligi-Sertifika-Verme-ve-Iptal-Etme\"><\/span>Y\u00f6netim Kolayl\u0131\u011f\u0131: Sertifika Verme ve \u0130ptal Etme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>T\u00fcm sertifika ya\u015fam d\u00f6ng\u00fcs\u00fc y\u00f6netimi (verme, yenileme, iptal etme) Intermediate CA&#8217;ler taraf\u0131ndan y\u00fcr\u00fct\u00fcl\u00fcr. Bu, g\u00f6revlerin da\u011f\u0131t\u0131lmas\u0131na ve s\u00fcre\u00e7lerin basitle\u015ftirilmesine olanak tan\u0131r. Bir sertifikan\u0131n iptal edilmesi gerekti\u011finde, bu i\u015flem ilgili Intermediate CA taraf\u0131ndan h\u0131zl\u0131ca ger\u00e7ekle\u015ftirilir ve CRL\/OCSP arac\u0131l\u0131\u011f\u0131yla duyurulur. E\u011fer t\u00fcm i\u015flemler tek bir Root CA \u00fczerinden yap\u0131lsayd\u0131, bu sistem pratik olarak y\u00f6netilemez hale gelirdi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Farkli-Guven-Seviyeleri-ve-Politikalarin-Uygulanabilmesi\"><\/span>Farkl\u0131 G\u00fcven Seviyeleri ve Politikalar\u0131n Uygulanabilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Hiyerar\u015fi, farkl\u0131 g\u00fcvenlik politikalar\u0131n\u0131n ve do\u011frulama standartlar\u0131n\u0131n uygulanmas\u0131na olanak tan\u0131r. \u00d6rne\u011fin, en s\u0131k\u0131 kimlik do\u011frulama s\u00fcre\u00e7lerini gerektiren EV sertifikalar\u0131n\u0131 veren bir Intermediate CA, \u00e7ok daha kat\u0131 g\u00fcvenlik denetimlerine ve politikalara tabi tutulabilir. Buna kar\u015f\u0131l\u0131k, yaln\u0131zca <a href=\"https:\/\/www.ihs.com.tr\/whois-sorgulama\" target=\"_blank\">domain sorgulama<\/a> ile kimlik do\u011frulayan DV sertifikalar\u0131n\u0131 veren bir ba\u015fka Intermediate CA, farkl\u0131 operasyonel politikalara sahip olabilir. Bu ayr\u0131m, farkl\u0131 ihtiya\u00e7lara y\u00f6nelik esnek ve uygun maliyetli \u00e7\u00f6z\u00fcmler sunulmas\u0131n\u0131 sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSL-Sertifikalari-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>SSL Sertifikalar\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Web sitenizin g\u00fcvenli\u011fi, dijital varl\u0131\u011f\u0131n\u0131z\u0131n ve marka itibar\u0131n\u0131z\u0131n temelini olu\u015fturur. G\u00fcvenilir bir SSL sertifikas\u0131, ziyaret\u00e7ilerinizin verilerini korur, arama motoru s\u0131ralaman\u0131z\u0131 iyile\u015ftirir ve e-ticaret siteleri i\u00e7in yasal bir zorunluluk olan g\u00fcvenli \u00f6deme altyap\u0131s\u0131n\u0131 sa\u011flar. \u0130HS Telekom olarak, bu kritik ihtiyac\u0131n\u0131z\u0131 en \u00fcst d\u00fczeyde kar\u015f\u0131lamak i\u00e7in kapsaml\u0131 \u00e7\u00f6z\u00fcmler sunuyoruz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenilir-Sertifika-Otoriteleri-ile-Is-Ortakligi\"><\/span>G\u00fcvenilir Sertifika Otoriteleri ile \u0130\u015f Ortakl\u0131\u011f\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom, sekt\u00f6r\u00fcn en sayg\u0131n ve d\u00fcnya \u00e7ap\u0131nda tan\u0131nan Sertifika Otoriteleri (CA) ile \u00e7al\u0131\u015f\u0131r. Sundu\u011fumuz t\u00fcm SSL sertifikalar\u0131, t\u00fcm modern taray\u0131c\u0131lar ve i\u015fletim sistemleri taraf\u0131ndan tan\u0131nan g\u00fcvenilir k\u00f6k sertifikalara ba\u011fl\u0131d\u0131r. Bu sayede, web sitenizi ziyaret eden hi\u00e7 kimsenin taray\u0131c\u0131 uyar\u0131lar\u0131yla kar\u015f\u0131la\u015fmayaca\u011f\u0131n\u0131 garanti ederiz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Genis-SSL-Sertifika-Yelpazesi-DV-OV-EV\"><\/span>Geni\u015f SSL Sertifika Yelpazesi (DV, OV, EV)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Her projenin ve i\u015fletmenin ihtiyac\u0131 farkl\u0131d\u0131r. Ki\u015fisel bir blog i\u00e7in Alan Ad\u0131 Do\u011frulamal\u0131 (DV) bir sertifika yeterliyken, bir e-ticaret sitesi veya kurumsal bir portal i\u00e7in Kurulu\u015f Do\u011frulamal\u0131 (OV) veya Geni\u015fletilmi\u015f Do\u011frulamal\u0131 (EV) sertifikalar daha uygun olabilir. \u0130HS Telekom, b\u00fct\u00e7enize ve g\u00fcvenlik ihtiyac\u0131n\u0131za en uygun sertifika t\u00fcr\u00fcn\u00fc se\u00e7ebilmeniz i\u00e7in size geni\u015f bir \u00fcr\u00fcn yelpazesi sunar. \u0130ster tek bir alan ad\u0131, ister birden \u00e7ok alt alan ad\u0131 (Wildcard SSL) veya birden \u00e7ok farkl\u0131 alan ad\u0131 (Multi-Domain SSL) i\u00e7in koruma ar\u0131yor olun, size \u00f6zel bir \u00e7\u00f6z\u00fcm\u00fcm\u00fcz mutlaka vard\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Uzman-Teknik-Destek-ve-Kolay-Kurulum-Surecleri\"><\/span>Uzman Teknik Destek ve Kolay Kurulum S\u00fcre\u00e7leri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL sertifikas\u0131 sat\u0131n almak bir ad\u0131msa, onu do\u011fru bir \u015fekilde kurmak ve yap\u0131land\u0131rmak di\u011fer \u00f6nemli ad\u0131md\u0131r. \u00d6zellikle <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> veya <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu kiralama<\/a> hizmetlerimize yeni ba\u015flayan kullan\u0131c\u0131lar i\u00e7in bu s\u00fcre\u00e7 karma\u015f\u0131k g\u00f6r\u00fcnebilir. \u0130HS Telekom&#8217;un deneyimli teknik destek ekibi, sertifikan\u0131z\u0131n kurulumundan yenilenmesine kadar her a\u015famada size yard\u0131mc\u0131 olmak i\u00e7in haz\u0131rd\u0131r. Kontrol panellerimiz \u00fczerinden sundu\u011fumuz kolay kurulum ara\u00e7lar\u0131 ile sertifikan\u0131z\u0131 dakikalar i\u00e7inde aktif hale getirebilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Rekabetci-Fiyatlandirma-ve-Musteri-Odakli-Hizmet-Anlayisi\"><\/span>Rekabet\u00e7i Fiyatland\u0131rma ve M\u00fc\u015fteri Odakl\u0131 Hizmet Anlay\u0131\u015f\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenli\u011fin bir l\u00fcks de\u011fil, bir standart oldu\u011funa inan\u0131yoruz. Bu nedenle, t\u00fcm SSL sertifikas\u0131 \u00e7\u00f6z\u00fcmlerimizi rekabet\u00e7i fiyatlarla sunuyoruz. \u015eeffaf fiyatland\u0131rma politikam\u0131z ve m\u00fc\u015fteri memnuniyetini her zaman \u00f6n planda tutan hizmet anlay\u0131\u015f\u0131m\u0131zla, web sitenizin g\u00fcvenli\u011fini sa\u011flarken b\u00fct\u00e7enizi de koruman\u0131za yard\u0131mc\u0131 oluyoruz. G\u00fcvenilir altyap\u0131, uzman destek ve uygun fiyatlar i\u00e7in \u0130HS Telekom&#8217;u tercih edin.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0130nternet \u00fczerinde g\u00fcvenli bir \u015fekilde gezindi\u011finizden nas\u0131l emin olursunuz? Taray\u0131c\u0131n\u0131z\u0131n adres \u00e7ubu\u011funda beliren asma kilit simgesi, asl\u0131nda karma\u015f\u0131k ve hiyerar\u015fik bir g\u00fcven&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16080,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[400],"tags":[],"class_list":["post-16079","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ssl-sertifikasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16079","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16079"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16079\/revisions"}],"predecessor-version":[{"id":16081,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16079\/revisions\/16081"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16080"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16079"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16079"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16079"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}