If the letters or passwords are not available, please consult the relevant certification center.
The holder of a digital certificate has a pair of public key and private key. The public key is public, while the private key is generated and held locally by the certificate holder, so it must be properly kept and kept confidential.
1) sets the password for the private key.
When the private key is generated, that is, when the digital certificate is downloaded, the browser will prompt the certificate applicant to set the private key password, which can protect the private key from illegal use. Specific setting method:
Click to download CA certificate, press the prompt box that pops up, then click "Set Security Level", select a high level, and then next, finally enter the private key password.
2) Handling of losing private key or forgetting password
Once the private key password is set to be unchangeable, if you forget or lose the password or lose your computer, you can only reapply for a certificate from the digital certificate authority and invalidate the previous certificate.
Expansive material:
A CA also has a certificate (including a public key and a private key). Public users on the Internet trust CA by verifying its signature, and anyone can get CA's certificate (including public key) to verify the certificate issued by it.
If a user wants to obtain a certificate of his own, he should apply to CA first. After the CA recognizes the identity of the applicant, it assigns a public key to it, and the CA binds the public key to the identity information of the applicant, and forms a certificate after signing it and sends it to the applicant.
If the user wants to verify the authenticity of another certificate, he will use the CA's public key to verify the signature on that certificate. Once the certificate is verified, it is considered valid. A certificate is actually the authentication of a user's public key issued by a certificate authority (CA).
The contents of the certificate include: information of the electronic visa authority, public key user information, public key, authority signature and validity period, etc. At present, the format and verification method of certificates generally follow the international standard X.509
Reference: Web links? /item/ca certificate/1002874 1