title: CertUtil | How CertUtil -verifykeys works internally?
body: <p>I have a CA certificate in Local Machine Certificate Store. 
  When I run this command - <code>enter code here</code></p>
  
  <p><em><code>certutil -verifyKeys</code></em>  gives <code>Key "KEYNAME" verifies as the public key for Certificate "KEYNAME" V0.0</code></p>
  
  <p><code>Signature test FAILED</code>
  <code>CertUtil: -verifykeys command FAILED: 0x80070057 
  (WIN32: 87 ERROR_INVALID_PARAMETER)</code></p>
  
  <p><code>CertUtil: The parameter is incorrect</code></p>
  
  <p>MSDN says <code>certutil -verifykeys</code> - Verify public/private key set.</p>
  
  <p>I was just wondering how it verifies these keys ?
  Eager to know the internal working of this command.</p>