Public Key Infrastructure Fundamentals Questions

Detailed understanding of public key infrastructure concepts, components, and operational concerns. Topics include the role of Certificate Authorities and registration authorities, digital certificates and X 509 structure, certificate issuance and verification, chain of trust and certificate chaining, certificate revocation mechanisms such as CRL and OCSP, trust models, cross signing, certificate pinning, certificate lifecycle management, key pair generation and escrow, secure storage of private keys, certificate deployment for TLS and code signing, and operational security considerations including automation, rotation, and compromise response.