Certificate authority - MDN Web Docs Glossary: Definitions of Web-related terms 编辑

A certificate authority (CA) is an organization that signs digital certificates and their associated public keys, thereby asserting that the contained information and keys are correct. 

For a website digital certificate, this information minimally includes the name of the organization that requested the digital certificate (e.g., Mozilla Corporation), the site that it is for (e.g., mozilla.org), and the certificate authority.

Certificate authorities are the part of the Internet public key infrastructure that allows browsers to verify website identity and securely connect over SSL (and HTTPS).

Note: Web browsers come preloaded with a list of "root certificates". The browser can use these to reliably check that the website certificate was signed by a certificate authority  that "chains back" to the root certificate (i.e. was trusted by the owner of the root certificate or an intermedate CA). Ultimately this process relies on every CA performing adequate identity checks before signing a certificate!

Learn more

• Certificate authority on Wikipedia
• Public key infrastructure on Wikipedia
• Mozilla Included CA Certificate List