If you do become your own ca, work with your software vendor to determine methods to protect the ca certificate.
如果您确实要做自己的CA，就和您的软件供应商商议决定保护ca证书的方法。
In other words, adding a ca to a keyring establishes a trust policy for every certificate that ca has ever signed or will sign in the future.
换句话说，对一个密匙环添加一个CA将对那个CA已经签名的或未来即将签名的每个证书建立一个信任策略。
Also, in some environments, you can request a ca to generate a ca certificate for a self-signed certificate, which validates and resigns the previously generated certificate.
而且，在某些环境中，您可以请求CA为自签署的证书生成一张ca证书，这就确认并再签署了以前生成的证书。
If you are your own CA, you control that CA as long as no one else has it.
如果您是自己的CA，那么只要别人无法染指您想控制多长时间都行。
The clients that designate this ca as trusted will readily accept any certificates issued by the ca.
将此CA指定为受信任证书颁发机构的客户机随时接受CA颁发的任何证书。
Since the client trusts any signing certificate it has (which in this case includes the ca certificate), it trusts certificates that the ca has signed.
由于客户机信任它拥有的任何证书(在本例中包括ca证书)，所以它信任CA签署的证书。
Since the client trusts any certificate it has (which in this case includes the ca certificate), it trusts certificates that the ca has signed.
由于客户端信任它拥有的任何证书(在本例中包含ca证书)，所以它信任CA签署的证书。
The CA evolution in Figure 3 happens to be symmetric, but not all CA evolutions are.
图3中CA 的进化碰巧是对称的，但是并不是所有 CA进化都是对称的。
The distinguished name is only guaranteed to be unique per ca, so there is no reason one ca would know or care that the identical DN had been issued by someone else.
只能保证此专有名称对每个CA是唯一的，因此，一个CA没有理由知道或关心同一DN是否由其他机构颁发。
The major disadvantage to a closed ca system is the fact that because you are the ca, you need a support structure to handle this responsibility.
封闭ca系统的主要缺点是，因为您就是CA，所以需要一个支持结构来处理这种职责。
The point is that the mappings from CA states to notes should be fairly "transparent;" the CA should do all the compositional work.
要点是从CA状态到音符的映射应当是相当“透明”的：“CA 应当完成所有作曲工作。”
The first step toward using a certificate issued by any ca is to designate that ca as a trusted third party.
要使用任意CA颁发的证书，第一步是将该CA指定为受信任的第三方。
Even though you are not the ca, you can set up a service via a public ca to provide certificates on your behalf.
尽管您不是CA，都可以通过公共CA建立服务以提供代表您的证书。
When the ca USES a self-signed certificate, called a Root ca, the ca usually publishes its self-signed certificate details publicly so that users can establish the authenticity of the ca.
当CA使用自签名证书时(称为根ca)，该ca通常公开发布其自签名证书详细信息，因此用户可以确定该CA的真实性。
All certificates issued by a ca are digitally signed by the ca, and can be verified using the ca certificate (which contains the ca's public key).
CA签发的所有证书都是由ca数字签署的，可以使用ca证书(它包含CA的公钥)对其进行验证。
In some cases, this ca is known as a third-party ca.
在某些情况下，这种CA被称为第三方ca。
CA functions are not available when the CA is locked.
在锁定CA时，将无法使用CA的功能。
In case of a ca signed certificate, the ca certificate of the ca which signed the server certificate is required.
对于CA签署的证书，需要签署服务器证书的CA的ca证书。
Certificate Authoriaty (ca) : certificate Authority (ca) is a trusted entity that issues digital certificates for use by other parties.
CertificateAuthoriaty (ca)：认证机构(Certificate Authority, ca)是发布数字证书供其他方使用的受信任实体。
To publish the ca's certificate, access the ca portlet and select publish ca certificate (Figure 5).
要发布ca的证书，请访问caPortlet并选择Publish caCertificate(图5)。
If you decide to get the Community Edition ca certified by another external ca, rather than use the self-signed certificate, you need to perform these steps.
如果您决定获取由另一个外部CA认证的CommunityEdition CA，而不使用自签名证书，则需要执行下列步骤。
Ca would repeat the last command that began with the characters ca, such as cat README.
ca将重复以字符ca开始的最后一条命令，如catREADME。
It would contain the same activity identifier as Coordinator Ca, but when App2 registers for the Durable2PC protocol to its Coordinator, Cb, its request is forwarded directly to Coordinator Ca.
它将包括与协调器Ca相同的活动标识符，但是当App2向它的协调器Cb注册Durable2PC协议的时候，它的请求直接传送给了协调器Ca。
Before importing the certificate issued by the external ca, you need to import the external ca's own certificate into ca-keystore as a trusted certificate.
在导入外部ca颁发的证书之前，需要先导入外部ca颁发的证书，您需要将外部ca本身的证书作为受信任的证书导入ca -keystore。
The digital certificate is typically issued by a trusted third party called a Certification Authority (ca). For a fee, the ca will generate a digital certificate that contains.
数字证书一般是由名为认证中心(Certification Authority,ca)的可信的第三方签发的。
The lock ca function locks the ca-keystore, thus preventing access to the ca functions discussed so far.
锁定ca功能可以锁定ca - keystore，从而防止访问目前讨论的ca功能。
The "Certificate Requests awaiting verification" panel in the ca portlet lists the CSRs submitted through the ca Helper application. To approve or reject any CSRs.
caPortlet中的“CertificateRequestsawaitingverification”面板列出了通过caHelper应用程序提交的CSR。
If setup is successful, a CA details screen with the message "CA setup is successful!" will display (Figure 10).
如果设置成功，将会显示CA详细信息屏幕和“CASetupissuccessful ！”消息(图10)。
Education: Corinne A. Seeds University Elementary School in Los Angeles, ca Center for Enriched Studies in Los Angeles, ca, John Marshall High School in L.A., ca.
学历：加州洛杉矶Corinne A .SeedsUniversity小学，加州洛杉矶推广教育中心，加州洛杉矶约翰·马歇尔中学。
Once the ca-keystore is unlocked, you will be able to access the ca functions.
在取消锁定ca -keystore之后，便可以访问ca功能。
应用推荐