X.509 Certificate, root CA, and key Problems: ---------