You don&#x27;t need to send your private key to a CA to get a cert. You send them a CSR with your public key.<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Certificate_signing_request" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Certificate_signing_request</a><p>Edit: Ah, if you were talking about the CA&#x27;s private keys, then the parent is correct.