Which of the following PKI elements will a web server distribute to all of its clients using HTTPS?

While the Root CA's public key is essential for validating the server's certificate, it is typically already trusted and stored in the client's trust store, not explicitly distributed by the web server during each connection.

During the SSL/TLS handshake for HTTPS, the web server sends its digital certificate to the client. This certificate contains the server's public key, which the client uses to encrypt the symmetric session key for secure communication. The client needs the server's public key to establish a secure, encrypted channel with the server.

The Root CA's private key is used to sign certificates and must be kept strictly confidential by the Certificate Authority; it is never distributed to clients.

The server's private key is a secret component kept only by the server to decrypt data encrypted with its public key and to sign responses; it is never shared with clients.

A server session key is a symmetric key generated after the initial handshake, often using the server's public key for initial secure exchange, and is unique to each session, not a static PKI element distributed.