Before the LDAP client USES a certificate for encryption, it verifies that the server it is talking with owns the certificate by encrypting a challenge and verifying that the server can decrypt it.

在LDAP客户机使用证书进行加密之前，它会验证自己正在与之进行交谈的服务器拥有这个证书，这是通过加密一个挑战并验证服务器可以对其进行解密实现的。

youdao

SSH offers certificate based authentication, strong encryption, and other features, and is considered to be far more secure.

SSH提供基于验证的证书、强加密和其他特性，并且被认为安全多了。

youdao

It'd be great to be able to do the same type of thing using asymmetric encryption, where the client has its own certificate (especially when you want to sign messages for sender verification).

能够使用非对称加密处理同类型的事情就太好了，其中客户端有自己的证书(特别是当您想要签署发送者证书消息时)。

youdao

They can then use a VeriSign certificate to authenticate themselves for the purpose of exchanging encryption keys used to secure Internet connections.

CNN: VeriSign takes the pain out of digital certificates