Glossary: Change Records, Cryptography and PKI

private key

The half of a key pair only its owner holds. It decrypts data sent to the owner and makes signatures; if it leaks, it must be replaced and the certificate revoked.