While the private portion of the certificate is used to create the signature, the password could also be stolen using social engineering or other similar techniques.

• 尽管在创建签名时要使用证书的私有部分,但是采用一些工程的方法或类似的技术也可以窃取密码。