A server creates a Certificate Signing Request (CSR). Which item is included in the request?

### Why this is right A CSR carries the public key that the eventual certificate will associate with the subject, along with identifying information such as the Common Name (CN). The server signs the request with its private key to demonstrate possession of the key that corresponds to the included public key. ### The concept A Certificate Signing Request (CSR) is a request for a Certificate Authority (CA) to issue a certificate. It is not itself the issued certificate. The server keeps its private key secret and sends the CSR to the CA; the CA can use the request to prepare a certificate without receiving the private key. ### The other options - **A. The server's private key**: the private key must remain secret on the server. The CSR contains the corresponding public key, not the private key. - **C. The Certificate Authority's (CA's) private key**: the CA uses this key to sign the certificate, and it is never a component of the server's request. - **D. The passphrase used to encrypt the CA's private key**: the passphrase protects the CA key file and is not certificate-request content. ### Terms - **CSR**: Certificate Signing Request. A signed request containing a subject and public key. - **CA**: Certificate Authority. An entity that issues and signs certificates. - **CN**: Common Name. A subject field commonly used for a server hostname. ### Remember A CSR sends a public key and identity request, never the private key.