title: What is the difference between a CA certificate and the certificate that we can download from the padlock?
body: <p>I am very new to this, so please cooperate with my lack of knowledge.
  I have to establish a secure connection with an organization.So,
  I issued a CSR to that organization.
  From that I came to know that my CSR had my public key, which I then send to the organization.
  The organization verified my organization and in return provided me with a .crt file.
  The .crt file had the same public key.
  So I believe my CSR was resent back to me but with a trust and a CA approval.
  So now my question is, where do I find the public key of the organization and also I followed these steps. </p>
  
  <pre><code>keytool -import -trustcacerts -keystore &lt;cacerts path&gt; -storepass &lt;password&gt; -alias myorgdomain -import -file &lt;crt path&gt;
  </code></pre>
  
  <p>where in the crt path I provided the path to the .crt file which the other organization provided me with.</p>
  
  <pre><code>openssl pkcs12 -export -out &lt;filename&gt; -inkey &lt;private key&gt; -in &lt;crt file&gt; -password pass:changeit
  </code></pre>
  
  <p>then I converted the file to pfx and then the file to jks.
  In place of  I kept the private which was generated during CSR generation. And in  I kept the path to the .crt file provided by the organization.</p>
  
  <p>This seems to work though. But I don't have a clear understanding how?</p>
  
  <p>I want to know how this is working and also where do I find the public key of that organization? </p>