Trusted entity that issues digital certificates. Verifies identity of certificate requesters and signs certificates to establish trust chains.