Which of the following PKI elements will a web server distribute to all of its clients using HTTPS?

The root CA public key is not distributed by the web server - it is pre-installed in client browsers and operating systems as part of their trusted root certificate stores.

During the TLS handshake, the web server sends its digital certificate to every connecting client, and that certificate contains the server's public key. The client uses this public key to verify the server's identity via the CA signature on the certificate and to participate in key exchange for encrypting the session. The server's public key is the only PKI element the server actively pushes to all clients.

The root CA private key is never distributed to anyone; it is kept secret by the Certificate Authority to protect the integrity of the entire PKI trust chain.

The server private key is never shared with clients - it stays on the server and is used to decrypt data or sign handshake messages.

Session keys are ephemeral and negotiated collaboratively by both parties during the TLS handshake; the server does not pre-generate and distribute them.