Assertion: root certificate | /r/HasProperty | offline
Facets:
Source sentences:
text: CAs typically take the further precaution of keeping the key for their long-term root certificates in an HSM that is kept offline, except when it is needed to sign shorter-lived intermediate certificates.