This question already has an answer here:

I'm attempting to install a certificate on a web server. I understand there is nothing secretive about the CSR. Obviously, I wouldn't want to reveal the private key I used to generate the CSR.

How about the certificate I receive back from the CA? As far as I can tell that's the same certificate that I will provide to the end user, correct?

I guess I'm a little confused because I've received certificates with public/private keys that I've installed within Windows so I can do SSO, VPNs, etc...

marked as duplicate by Steffen Ullrich, schroeder Mar 5 '18 at 21:05

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


The certificate you receive back from the certificate authority is the public certificate. You can consider it as public, and it will eventually be be published by the certificate authority in certificate transparency logs.

Moreover, if anyone had access to it, including your certificate authority, you must consider it as public.

Not the answer you're looking for? Browse other questions tagged or ask your own question.