This is a follow up question , after getting a signed certificate from one CA.
researched a lot , but no luck. After getting the CA reply, While downloading the certificate, it popped up saying "creating a private key” with passphrase.
- Why it’s asking to create a private key? What is its use? (say PK1)
- While creating the CSR, i already had the private key (SAY PK2). Are PK1 and PK2 same?
- Someone from CA can also get it, like i did, so how it’s not vulnerable to attack?
I completed the wizard, and downloaded the certificate with PK1.
I referred all the possible below links but not getting above answers
Previous question link - previous post
researched a lot, to find the answers of question posted but no luck. I am getting stuck at this point, is the signed certificate from CA also has a private key or its only a public key ? As far as i got "A P7B/pkcs7 file only contains certificates and chain certificates" which we need to import as "CA reply" in out keystore.