How does a provider sign an ssl certificate without a key?

Question

Digital certificates

Good day!
We are convinced that HTTPS is secure. But is it? After all, the publisher of the certificate somehow publishes it only according to the CSR, which does not contain a secret key, but only a public (?)
Prompt?

Answer 1

Read something like "Asymmetric cryptography for dummies".
The private key should not go to untrusted persons at all. From the word at all. Getting a key to a third party is an opportunity to identify yourself as the object that is in the certificate (person, equipment, server).
In CSR, it is the common key and the data that will be entered into the certificate (by the way, not everything is necessary - the CA uses templates that can ignore some of the data).

Answer 2

All figured out. A CA issues a certificate without having a private key, which they don't need to issue a certificate. The following information is indicated in the certificate itself:
- To whom the certificate was issued
- By whom the certificate was issued
- When issued
- Validity period
- Public key owners
- Certificate signature
Thank you for the tips.