The answer to question 01: The digital certificate contains the subject’s public key. The answer to question 02: SSO (Single Sign-On) and support for mutual authentication. The answer to question 03: A RADIUS client is a server or device that accepts the user's requests. The client needs to be configured with the RADIUS server address and preshared key.