. . "The logon certificate 110 that includes a session key, a digital signature, a sealed certificate of credentials, and other information, like issuing domain, etc., is sealed by further encrypting it with a user-supplied password." . . .