Digital certificate verification method, apparatus, and device, and computer-readable storage medium

An apparatus for digital certificate verification, used in a first device, the apparatus comprising:

• a processor;
• and
• a memory coupled to the processor to store instructions, which when executed by the processor, cause the apparatus to:
• receive, from a second device, a first link certificate and a first digital certificate, wherein the first link certificate is at least one of at least one link certificate stored in the second device, one link certificate is obtained by signing, based on a private key of a root certificate with an earlier validity period in two root certificates, a public key of a root certificate with a later validity period in the two root certificates, the two root certificates are any two of at least two root certificates stored in the second device, and the first digital certificate is generated based on a private key of a root certificate with a latest validity period in the at least two root certificates and information about the second device;
• and
• verify validity of the first digital certificate based on a root certificate trusted by the first device and the first link certificate, wherein the root certificate trusted by the first device is at least one of the at least two root certificates.

An apparatus for digital certificate verification, comprising:

• a processor;
• and
• a memory coupled to the processor to store instructions, which when executed by the processor, cause the apparatus to:
• send, to a first device, a first link certificate and the first digital certificate, so that the first device verifies validity of the first digital certificate, wherein the apparatus is used in a second device, the second device stores at least two valid root certificates, at least one link certificate, and a first digital certificate, one link certificate is obtained by signing, based on a private key of a root certificate with an earlier validity period in two root certificates, a public key of a root certificate with a later validity period in the two root certificates, the two root certificates are any two of the at least two root certificates, and the first digital certificate is generated based on a private key of a root certificate with a latest validity period in the at least two root certificates and information about the second device, wherein the first link certificate is at least one of the at least one link certificate, and the first link certificate is used to verify the validity of the first digital certificate.