Certificate Authority (CA)

A trusted entity that issues digital certificates to verify the identity of websites, services, and users.

A CA binds a public key to an identity by signing an X.509 certificate. Clients verify server identities during TLS handshakes using the CA trust store. Modern best practices include automated issuance and rotation via ACME.