3

In a public-key infrastructure, there are two ways a public key can be trusted: either because it's signed by a certificate authority that you trust, or because you already have it in a list of trusted public keys. That's where the chain of signatures ends: in a list of pre-trusted public keys. These pre-trusted public keys are usually called “root CAs” or “...


3

You're confusing a lot of things: Alice and Bob agrees on a shared private key that is to be used to encrypt You cannot have a "shared private" key; sharing and keeping things private are opposite terms. That would be called a secret key, as it is kept secret between Alice and Bob (some books confuse these terms as well, but yeah). To reach private ...


1

The Full Response has additional information over and above the P7B file with information such as the CMC response and some chaining information. I'd go as far as to say it's not really relevant in day-to-day use. You can look at them all with certutil.exe and make your own mind up though - simply pipe the outputs to a text file and read at your leisure. ...


Only top voted, non community-wiki answers of a minimum length are eligible