@section cer format
Certificate is the @code{@ref{pki-signed}} structure.
-Stored in a file, it should start with "pki/cer" @ref{Magic, magic}.
+Stored in a file, it should begin with "pki/cer" @ref{Magic, magic}.
Its @code{/load/t} equals to @code{cer}.
@code{/load/v} contains @code{cer-load}:
@cindex pki-encrypted
@section pki-encrypted format
-Stored in a file, it should start with "pki/encryptd" @ref{Magic, magic}.
+Stored in a file, it should begin with "pki/encryptd" @ref{Magic, magic}.
@verbatiminclude format/encrypted.cddl
@section pki-hashed format
Integrity protected container, CMS'es DigestedData analogue.
-Stored in a file, it should start with "pki/hashed" @ref{Magic, magic}.
+Stored in a file, it should begin with "pki/hashed" @ref{Magic, magic}.
@verbatiminclude format/hashed.cddl
@verbatiminclude format/private-key.cddl
-Stored in a file, it should start with "pki/prvkey" @ref{Magic, magic}.
+Stored in a file, it should begin with "pki/prvkey" @ref{Magic, magic}.
@node private-key-gost3410
@subsection private-key with GOST R 34.10-2012
That resembles @url{https://datatracker.ietf.org/doc/html/rfc5652, CMS}
(PKCS#7) ASN.1-based format.
-Stored in a file, it should start with "pki/signed" @ref{Magic, magic},
+Stored in a file, it should begin with "pki/signed" @ref{Magic, magic},
unless this is a @ref{cer, certificate}.
@verbatiminclude format/signed.cddl