=head1 FILES =over 5 =item Certificate File The certificate file is a PEM-encoded file that binds a public key to an identity (i.e., a Distinguished Name). The public key is required to verify B signatures. Refer to examples 3 and 4 for details on creating self-signed certificate files. Note: Certificate chains and expiration dates are not checked in the verification process. It is the responsibility of the B administrator to periodically manage (i.e., add, remove, update) any certificates installed on the clients. =item Private Key The private key is a PEM-encoded DSA or RSA key. The private key is required to sign B. Refer to examples 1 and 2 for details on creating DSA and RSA keys. =back