I am new to Network Security and learning about various security features like Diffie-Helmann and others.
I understand that the Public key send by the server to the client needs to certified that it is authentic. So, a Certificate Authority (CA) needs to sign the public key. But I would like to know how is this public key signed in the certificate. Using some private key? And if so, how does the client decrypt this certificate and finally get the public key of the server? For example: how does it work in case of a TLS handshake?