Certificate
Problem
A server gives your browser a public key.
But whose key is it?
An attacker can also generate a key and claim:
“I'm bank.com.”
Solution — Certificate
A certificate binds an identity to a public key: bank.com ↕ Public key
and that binding is digitally signed by an issuer.
Core idea: a certificate provides a signed binding between an identity and a public key.