Public and private Certificate Authorities (CA), services for issuing and managing X.509 digital certificates for TLS/SSL, code signing, client authentication, and digital signatures. Includes commercial CAs, Let’s Encrypt, corporate PKI infrastructures, Extended Validation (EV) services, certificate transparency, revocation via CRL and OCSP, and compliance standards like WebTrust or eIDAS for trust stores and interoperability.