How do I contact my users and make my Certificate Authority available?
After Certificate Assistant has created your Certificate Authority, use the “Mail Invitation…” button to compose an email with configuration file included as an attachment. You must provide the email addresses of users who will request certificates from you.

What is the Certificate Authority folder?
This folder contains files that make up your Certificate Authority. They include the configuration file and certificates that make up the Certificate Authority. 

How do I provide my users with the Certificate Authority certificates?
In order for your users to successfully use their certificates, you need to provide them with the Certificate Authority certificates you have created. The Certificate Assistant will automatically create a PEM (.pem) file that contains these certificates. This file is located in the Certificate Authority folder. You should provide this .pem file to your users in a secure location. For added security, do not send them this file using email. Make it available on secure file server, an LDAP repository, or use removable disks. When the user opens the .pem file, Keychain Access will help them mark the Certificate Authority certificates as “trusted.” Untrusted certificates will be displayed as “This root certificate is not trusted.”

How will I issue new certificates to users before their certificates expire?
When you get a certificate signing request (CSR) email from a user, make sure you save that email in order to renew that user’s certificate in the future. Click the attachment in the email to issue a new certificate. Issue new certificates before the certificate’s expiration date so your users don’t need to worry about requesting a new certificate from you.