Public Key Identity and Authentication
Identification
Should I enroll this public key?
Authentication
Does the thing controlling the private key has never lost control of the private key so I can determine is the thing / entity the same thing that I'm expecting it to be?