Which of the following statements are true regarding the certificate of a Root CA? (Choose TWO correct answers.)
A. It is a self-signed certificate.
B. It does not include the private key of the CA.
C. It must contain a host name as the common name.
D. It has an infinite lifetime and never expires.
E. It must contain an X509v3 Authority extension.
What exactly does “Choose TWO correct answers” mean? It’s AB. Answer E is not exact enough, the Option is basicConstraints.
You are correct