An entity that issues and signs digital certificates binding public keys to identities or service names.