I thought the way it worked was that the certificate signed with the certificate private key only contains the public key, and the ssh server, after checking th

I thought the way it worked was that the certificate signed with the certificate private key only contains the public key, and the ssh server, after checking the certificate is valid, validates that the client has the private key corresponding to the public key in the certificate.