With a successful response from the request, the internal browser function to generate a key-pair is invoked. Figure 2 shows the Netscape Navigator window that pops up notifying the requester that a key pair is needed for certificate preparation.

Figure 2
Generating A Key-pair
Certificate Issuance
Once the CA verifies the requesters information, they''ll wrap the requester''s public key (half the key-pair from the generation step) in a digital certificate, sign it using the CA private key, and return the certificate to the browser. The completed certificate and various optional steps for storing it are shown in Figure 3 below.

Figure 3
Receipt of Certificate