hard
Single Answer
0What can a root SSL (TLS) certificate do?
Answer Options
A
Remove a certificate from a CRL
B
Generate a signing key and use it to sign a new certificate
C
Authorize new CA users
D
Allow key stretching
Correct Answer: B
Explanation
Root certificates are at the root of trust in a CA hierarchy and allow signing keys to be created and used to sign certificates. They are not used to authorize new CA users or to remove certificates from a CRL. Key stretching is used to make weak keys stronger, not as part of cryptographic certificates.