Which of the following allows lower level domains to access resources in a separate Public Key Infrastructure?

Which of the following allows lower level domains to access resources in a separate Public Key
Infrastructure?

A.
Trust Model

B.
Recovery Agent

C.
Public Key

D.
Private Key