Public are the certs that can't be used for signing stuff, private are basically self-signed certificates (with some percent of error due to the way of detection).