# What does the Secret named in an ACME issuer's privateKeySecretRef contain?

cert-manager, Hard (Expert), Concepts. https://k8wiz.com/uquiz/what-does-the-secret-named-in-an-acme-issuers-privatekeysecretref-contain

- A. The private keys of all certificates the issuer has issued
- B. The ACME server's root CA certificate
- C. Credentials for the DNS provider used by DNS-01
- D. The private key of cert-manager's ACME account

**Answer:** The private key of cert-manager's ACME account

**Explanation:** cert-manager creates this key when the issuer is first set up and uses it to sign every request it sends to the ACME server, such as Let's Encrypt. If you delete it, cert-manager registers a new account. The private key for each certificate lives in that Certificate's own Secret.