What Is a Certificate Authority (CA)? The Foundation of SSL Trust
· SSL Basics
A Certificate Authority (CA) is a trusted third-party organization that signs SSL/TLS certificates, verifying the identities of websites, organizations, and individuals. It is the foundational pillar of internet trust.
Why CAs Are Necessary
In an SSL connection, the browser must verify the server is actually who it claims to be. Browsers maintain a pre-installed list of trusted Root CAs. If a server's certificate is signed by a CA on this list, the connection is trusted.
Root CA vs Intermediate CA
Root CA: The highest trust anchor. Root CA certificates come pre-installed in operating systems and browsers. Root CAs don't directly sign end-user certificates for security reasons.
Intermediate CA: Authorized by the Root CA to sign end-user certificates. This layered structure protects the Root CA's private key. If an Intermediate CA is compromised, only that CA is revoked — the entire trust infrastructure doesn't collapse.
Major Certificate Authorities
DigiCert: Industry leader for enterprise and EV certificates. Sectigo (formerly Comodo CA): Widest product range, competitive pricing. GlobalSign: Strong European presence, enterprise-focused. Let's Encrypt: Free, automated DV certificates from the nonprofit ISRG. Entrust, HARICA, SwissSign: Regional and sector-specific trusted CAs.
CA Selection Criteria
Browser and OS compatibility (older Android may not recognize all CAs). Validation types offered (DV, OV, EV). Technical support quality for OV/EV processes. Renewal automation (ACME protocol or API). Financial warranty amount for EV certificates.
CA Trust Issues and Revocation
If a CA's private key is stolen or it issues incorrect certificates, affected certificates are revoked via CRL (Certificate Revocation List) or OCSP (Online Certificate Status Protocol). DigiNotar (2011) and Symantec CA (2017) are notable examples of CAs removed from browser trust lists due to trust violations.
Visit the PekiSSL product page to find the right certificate for your needs.