The difference between a signing certificate and a cryptographic certificate

Generally speaking, CA's Usbkey will have two certificates, one signature, one encryption

Signature: Forgery-proof, anti-repudiation

Encryption: Anti-Peeping

Signature: Private key signature, public key authentication, so even if the private key is lost, the previously signed data is still valid, so the private key is generally only one copy

Encryption: Public key encryption, private key decryption, once the private key is lost, the data can not be restored, so the CA will generally back up the encryption certificate

The encryption certificate can also be used for signing, but the signing certificate is not available for encryption

Above, the other two are almost indistinguishable

The difference between a signing certificate and a cryptographic certificate