A web server requires a certificate renewal. What must be protected most carefully to prevent an attacker impersonating that server?

1. The server's published DNS hostname
2. The certificate's associated private key
3. The public certificate's subject name
4. The certificate authority's public root certificate