A Certificate Signing Request (CSR) contains the server's private key so the Certificate Authority (CA) can use it to sign the issued certificate.

### Why this is right The statement is false because the server's private key is not included in the Certificate Signing Request (CSR). The server uses that key to sign the request, while the request carries the corresponding public key and subject information. ### The concept A private key is secret information controlled by its owner. A public key can be shared and can appear in a certificate request. The request's signature lets a Certificate Authority (CA) verify that the requester possesses the private key corresponding to the public key in the request. The CA then uses its own private key to sign the issued certificate, not the server's private key. ### Watch out Do not confuse using a private key to sign a CSR with placing that private key inside the CSR. Signing proves possession without disclosing the key. ### Terms - **CSR**: Certificate Signing Request. A signed request for a certificate containing a public key and subject details. - **CA**: Certificate Authority. An issuer that signs certificates. ### Remember The requester proves control of its private key by signing, but sends only the public key in the CSR.