Match each OpenSSL certificate workflow file with its correct function: Files: 1. server.key 2. server.csr 3. server.crt 4. ca.srl Functions: A. Private key generated by the server to establish secure TLS connections B. Certificate Signing Request containing the server's public key and identity details C. Signed public key certificate issued to the server by the Certificate Authority D. State tracking file used by the Certificate Authority to manage issuance serial numbers

### The pairs | Item | Matches | Why | |---|---|---| | `conestoga.key` | Server's private key | This is the server's secret key file and remains distinct from the certificate. | | `conestoga.csr` | Server's signed certificate request | It contains the server's public key and subject information, plus a signature proving possession of the corresponding private key. | | `conestoga.crt` | Certificate issued and signed by the CA | The CA creates this certificate from the request and signs it with the CA's private key. | | `infinityca.srl` | Serial-number file created for the issuing CA | The described command can create this file to track the serial number used in issuing a certificate. | ### The concept A file extension is a useful clue, but the workflow role is what matters. The `.key` file stores a private key, the `.csr` file is a request, and the `.crt` file is a certificate. The serial-number file supports certificate issuance and is not a key or certificate. ### Terms - **CA**: Certificate Authority. The entity that issues and signs certificates. - **CSR**: Certificate Signing Request. A signed request for a certificate. ### Remember Keep the server key, request, issued certificate, and CA serial file conceptually separate.