Note: Backup your private key! We do not get a copy of your private key at any time so, after completing this application procedure, we strongly advise you create a backup. Your certificate is useless without it.
More info
Your private key never leaves this computer and is never transmitted to the certificate issuer.
Your public and private keys are generated by the crypto module on your local machine.
The options under "Private Key Options" are to instruct your local software on how to generate your keys.
They are not instructions sent to remote servers for remote key generation.
Revocation Password
If you believe the security of your certificate has been compromised, it may be revoked. A revocation password is required to ensure that only you may revoke your certificate: