question and answer about certificate-authority