an organisation that provides a root trust or intermediatory trust signed digital certificates from a certificate signing request CSR
can utilise the help from a registration authority typically only known and reputable certificate authorities should be trusted