> Entrust goes through great pains to ensure that I am who I say I am, and
> that I represent my company. Finally, through e-mail they send me a
> link to retrieve my certificate. This link takes me to a page that is
> neither password protected nor encrypted - and yet it contains my secure
> certificate in plain text!
>
> Am I missing something here?
No. Only you hold the private key. They are giving you the public cert
which contains the information that is available to any one browsing your
secure site (view certificate while at a https page).
