You don't need to send your private key to a CA to get a cert. You send them a CSR with your public key. https://en.wikipedia.org/wiki/Certificate_signing_requ

You don't need to send your private key to a CA to get a cert. You send them a CSR with your public key. https://en.wikipedia.org/wiki/Certificate_signing_request https://en.wikipedia.org/wiki/Certificate_signing_request Edit: Ah, if you were talking about the CA's private keys, then the parent is correct.