Question: How do you verify a public key was issued by your private CA?