ITPEC FE Morning October 2023 Question 44
ITPEC FE Morning October 2023 — Question 44 of 80
SSL/TLS certificate contents — what key a website's SSL/TLS certificate contains.
An SSL/TLS certificate is a public document sent by the server to the client during the TLS handshake. It contains the website's public key in unencrypted (plaintext) form, so the client can read it and use it to establish a secure connection.
Why not others:
- (a) The private key is never included in the certificate — it stays on the server. Encrypting it and putting it in a public certificate would defeat its purpose.
- (b) The public key in the certificate is not encrypted — it must be readable by any client that receives the certificate.
- (c) The private key is never placed in the certificate at all, whether encrypted or not.
Key rule: SSL/TLS certificate = unencrypted public key + domain info + CA signature. The private key never leaves the server.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.