soitgoes

Having the root CA's private key doesn't give them access to the end entity's private keys. When you ask a CA for a cert, you only provide them with your public key (in the form of a CSR) for them to sign. The CSR does not contain the private key.

Nice service. When I'm coding Trance, mainly Armin van Buuren, works best for me.

They're doing very well with testicular cancer treatment. About 90% are cured regardless of stage. Treatment of other cancers hasn't progressed as well unfortunately.