When a certificate issuer is not recognized by a web browser, which of the following is the MOST common reason?
During incident response, which of the following procedures would identify evidence tampering by outside entities?