In PKI, which entity issues digital certificates?

In PKI, which entity issues digital certificates?

• A. Registration Authority
• B. Certificate Authority
• C. Key Management System
• D. Security Operations Center

Answer: (B)

Certificate Authorities are the trusted entities in PKI that issue and sign digital certificates. When a certificate is needed, the CA verifies the subject’s identity and then creates the certificate that binds the subject’s identity to their public key, signing it with the CA’s private key so others can verify it using the CA’s public key. This signature is what establishes trust in the binding between identity and key. A Registration Authority may validate identity on behalf of the CA but does not issue certificates itself. A Key Management System handles keys and their lifecycle, not certificate issuance. A Security Operations Center focuses on monitoring and defense, not issuing certificates.

Certificate Authorities are the trusted entities in PKI that issue and sign digital certificates. When a certificate is needed, the CA verifies the subject’s identity and then creates the certificate that binds the subject’s identity to their public key, signing it with the CA’s private key so others can verify it using the CA’s public key. This signature is what establishes trust in the binding between identity and key. A Registration Authority may validate identity on behalf of the CA but does not issue certificates itself. A Key Management System handles keys and their lifecycle, not certificate issuance. A Security Operations Center focuses on monitoring and defense, not issuing certificates.