A Certificate Authority is:

A Certificate Authority is:

• A. An entity that issues and signs digital certificates with identity and a key
• B. A hardware device used to store certificates
• C. A firewall feature
• D. A software for password management

Answer: (A)

In PKI, a Certificate Authority is the trusted entity that issues digital certificates and signs them to bind an identity to a public key. It verifies who the certificate holder claims to be, issues a certificate that contains the holder’s identity information and public key, and then signs that certificate with its private key. Anyone receiving the certificate can verify that signature using the CA’s public key, which is trusted because it’s provided by a root CA already installed in the relying party’s trust store. This creates a chain of trust: if the certificate is valid and signed by a trusted CA, the identity and key are trusted for secure communication. This role is distinct from storing certificates in a hardware device (like a secure storage module), from firewall features, or from password management software. Putting certificates on a device or enabling a firewall feature does not certify identities or issue certificates; those are about storage or network protection, not issuing trusted attestations.

In PKI, a Certificate Authority is the trusted entity that issues digital certificates and signs them to bind an identity to a public key. It verifies who the certificate holder claims to be, issues a certificate that contains the holder’s identity information and public key, and then signs that certificate with its private key. Anyone receiving the certificate can verify that signature using the CA’s public key, which is trusted because it’s provided by a root CA already installed in the relying party’s trust store. This creates a chain of trust: if the certificate is valid and signed by a trusted CA, the identity and key are trusted for secure communication.

This role is distinct from storing certificates in a hardware device (like a secure storage module), from firewall features, or from password management software. Putting certificates on a device or enabling a firewall feature does not certify identities or issue certificates; those are about storage or network protection, not issuing trusted attestations.