What It Is
A certificate authority, or CA, is like a passport office for websites. Before it issues a certificate, it verifies that the person requesting it actually controls the domain, and sometimes that the business behind it is real. Browsers and operating systems ship with a built-in list of CAs they trust. If a certificate was signed by one of them, the browser accepts it. If not, visitors see a warning.
Why It Matters for Your Business
Most small businesses never deal with a CA directly, because their host requests and installs the certificate for them. It still helps to know the basics. Free certificates from widely trusted CAs, such as Let’s Encrypt, provide the same encryption strength as paid ones. Paid certificates can add extra identity checks or warranties, which matter more to banks and large retailers than to a local tennis coach.
Good to Know
If a site shows a certificate error even though you have a certificate, the cause is often a missing intermediate certificate (a link in the chain of trust back to the CA) or a certificate issued for the wrong domain name, such as covering example.com but not www.example.com. Your hosting provider can usually fix this quickly once you send them a screenshot of the error.