May sound like a silly question but where are private keys stored as part of Asymmetric Encryption?
For example say I have a Web Server and I install a 3rd Party SSL certificate from a third party. When installed the certificate is presented to end users to verify the identity of the Web Server and the public key within the certificate is used to encrypt data as part of SSL. Where does the Web Server normally keep the corresponding Private Key to decrypt the data and how is this kept safe? Would they be in "key stores"?