{"id":21015,"date":"2026-04-04T04:25:45","date_gmt":"2026-04-04T04:25:45","guid":{"rendered":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/?p=21015"},"modified":"2026-04-04T04:29:31","modified_gmt":"2026-04-04T04:29:31","slug":"certifying-authority-ca","status":"publish","type":"post","link":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/","title":{"rendered":"Certifying Authority (CA)"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\" id=\"what-is-certifying-authority\"><span class=\"ez-toc-section\" id=\"What_Is_a_Certifying_Authority_CA\"><\/span>What Is a Certifying Authority (CA)?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>A Certifying Authority (CA) is a third party that certifies a digital certificate utilized in confirming the identity of an individual or organization or a device over the Internet. The certificates are instrumental in the use of Public Key Infrastructure (PKI), which helps in executing encryption, authentication, and digital signatures to verify that digital communication is secure.<\/p><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #0c0c0c;color:#0c0c0c\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #0c0c0c;color:#0c0c0c\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#What_Is_a_Certifying_Authority_CA\" >What Is a Certifying Authority (CA)?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Functions_of_a_Certifying_Authority\" >Functions of a Certifying Authority<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#How_Does_a_Certifying_Authority_Work\" >How Does a Certifying Authority Work?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Types_of_Digital_Certificates_Issued_by_a_CA\" >Types of Digital Certificates Issued by a CA<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Types_of_Certifying_Authorities\" >Types of Certifying Authorities<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Root_CA\" >Root CA<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Intermediate_CA\" >Intermediate CA<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Public_CAs_vs_Private_CAs\" >Public CAs vs Private CAs<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Certifying_Authority_in_India_Example\" >Certifying Authority in India (Example)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Why_Are_Certifying_Authorities_Important\" >Why Are Certifying Authorities Important?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Challenges_Faced_by_Certifying_Authorities\" >Challenges Faced by Certifying Authorities<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.legalserviceindia.com\/Legal-Articles\/certifying-authority-ca\/#Conclusion\" >Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n\n\n\n\n<p>Consider a CA to be a digital notary. As is the case with a notary who ensures that the documents are authentic in the real world, a CA ensures that the digital identities are authentic and vouched in the virtual world.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"functions-of-certifying-authority\"><span class=\"ez-toc-section\" id=\"Functions_of_a_Certifying_Authority\"><\/span>Functions of a Certifying Authority<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>A certifying authority performs several critical tasks to ensure secure digital interactions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Issuance of Digital Certificates:<\/strong> Identifies those who have applied and issues a digital certificate that contains a public key and information on the applicant.<\/li>\n\n\n\n<li><strong>Certificate Lifecycle Management<\/strong>\n<ul class=\"wp-block-list\">\n<li>Renewal of expired certificates<\/li>\n\n\n\n<li>Revocation of compromised or invalid certificates<\/li>\n\n\n\n<li>Suspension in cases under investigation<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Maintaining Certificate Revocation Lists (CRLs):<\/strong> Lists of certificates that are no longer valid and must not be trusted.<\/li>\n\n\n\n<li><strong>Publishing Public Keys:<\/strong> Permits digital certificates to be distributed so that others may verify the public key holder\u2019s identity.<\/li>\n\n\n\n<li><strong>Ensuring Legal and Regulatory Compliance:<\/strong> Operates under laws like the IT Act (India), eIDAS Regulation (EU), or industry standards (WebTrust, ETSI, etc.).<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-certifying-authority-works\"><span class=\"ez-toc-section\" id=\"How_Does_a_Certifying_Authority_Work\"><\/span>How Does a Certifying Authority Work?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>Step<\/th><th>Description<\/th><\/tr><tr><td>Key Pair Generation<\/td><td>This is the situation in which the user or the system generates a private key and a public key.<\/td><\/tr><tr><td>Certificate Signing Request (CSR)<\/td><td>What is sent to the CA is a request containing the public key and identity information.<\/td><\/tr><tr><td>Identity Verification<\/td><td>The CA will verify the identity of the person requesting documentation and\/or a background check.<\/td><\/tr><tr><td>Certificate Issuance<\/td><td>The CA issues a digital certificate vouching for the identity with the respective public key in case it&#8217;s authentic.<\/td><\/tr><tr><td>Digital Signature<\/td><td>The CA digitally signs the certificate using its own private key, making it verifiable and trusted.<\/td><\/tr><tr><td>Usage in Communication<\/td><td>The digital certificate is then used for secure operations like email encryption, code signing, SSL\/TLS for websites, etc.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"types-of-digital-certificates\"><span class=\"ez-toc-section\" id=\"Types_of_Digital_Certificates_Issued_by_a_CA\"><\/span>Types of Digital Certificates Issued by a CA<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>SSL\/TLS Certificates:<\/strong> Applied by the websites in setting the HTTPS mode and encrypting the communication flow between browsers and servers.<\/li>\n\n\n\n<li><strong>Code Signing Certificates:<\/strong> Provide an option of signed applications to guarantee the integrity and authenticity of the code by the software developers.<\/li>\n\n\n\n<li><strong>Email Certificates (S\/MIME):<\/strong> Apply email encryption and message signing to determine the confidentiality and validity of the messages sent through email.<\/li>\n\n\n\n<li><strong>Client Certificates:<\/strong> Applied to acknowledge users or devices of a secure network.<\/li>\n\n\n\n<li><strong>Document Signing Certificates:<\/strong> Applied to digitally sign the PDFs and other documents that have their legal weight.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"types-of-certifying-authorities\"><span class=\"ez-toc-section\" id=\"Types_of_Certifying_Authorities\"><\/span>Types of Certifying Authorities<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"root-ca\"><span class=\"ez-toc-section\" id=\"Root_CA\"><\/span>Root CA<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The highest-level Certificate Authority in a PKI.<\/li>\n\n\n\n<li>Browsers or operating systems do trust their self-authorized certificates.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"intermediate-ca\"><span class=\"ez-toc-section\" id=\"Intermediate_CA\"><\/span>Intermediate CA<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The Root CA issued these.<\/li>\n\n\n\n<li>Takes care of issues concerning the issuance of certificates in the name of the Root CA as a way of improving security.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"public-vs-private-cas\"><span class=\"ez-toc-section\" id=\"Public_CAs_vs_Private_CAs\"><\/span>Public CAs vs Private CAs<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>DigiCert, Sectigo, and GlobalSign are public CAs that sell certificates to the general population.<\/li>\n\n\n\n<li>Internal CAs are applied within the organization itself only in cases of internal encryption and authentication.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"certifying-authority-india\"><span class=\"ez-toc-section\" id=\"Certifying_Authority_in_India_Example\"><\/span>Certifying Authority in India (Example)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Under the Information Technology Act, 2000, the Controller of Certifying Authorities (CCA) regulates all CAs in India. Some licensed CAs in India include the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>eMudhra<\/li>\n\n\n\n<li>Sify Technologies<\/li>\n\n\n\n<li>NSDL<\/li>\n\n\n\n<li>Capricorn, CA<\/li>\n\n\n\n<li>NIC (National Informatics Centre)<\/li>\n<\/ul>\n\n\n\n<p>These authorities issue Class 3 and Document Signer Certificates for e-filing, digital signatures, GST, and more.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"importance-of-certifying-authorities\"><span class=\"ez-toc-section\" id=\"Why_Are_Certifying_Authorities_Important\"><\/span>Why Are Certifying Authorities Important?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>Aspect<\/th><th>Description<\/th><\/tr><tr><td>Security<\/td><td>Secure, encrypted communication via the internet is ensured.<\/td><\/tr><tr><td>Authentication<\/td><td>States the identity of sites, individuals, and systems.<\/td><\/tr><tr><td>Trust<\/td><td>Establishes confidence in the users through the elimination of phishing, fraud, and identity theft.<\/td><\/tr><tr><td>Legal Validity<\/td><td>Digital certificates are recognized with legal validity and fitted with in-court admissible digital signatures.<\/td><\/tr><tr><td>E-commerce &amp; Online Services<\/td><td>Can hardly be done without banking, payment gateway, online contracts, etc.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"challenges-faced-by-cas\"><span class=\"ez-toc-section\" id=\"Challenges_Faced_by_Certifying_Authorities\"><\/span>Challenges Faced by Certifying Authorities<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Trust Management:<\/strong> Causing them not to use their certificates in shoddy ways.<\/li>\n\n\n\n<li><strong>Cybersecurity Threats:<\/strong> CAs make highly lucrative targets of hackers.<\/li>\n\n\n\n<li><strong>Regulatory Compliance:<\/strong> Has to comply with high national and international standards.<\/li>\n\n\n\n<li><strong>Revocation Handling:<\/strong> Role of revoked certificates to be mistakenly accepted.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"conclusion\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>The backbone of digital trust in the current online environment is a certifying authority (CA). Whether done during secure online banking operations or during the signing of a document, CAs are establishing trust in the digital world by making sure that the identity behind any form of digital communication is authentic. With the increasing digital world, the role of the CAs becomes more central to the security of information, privacy, and trust.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What Is a Certifying Authority (CA)? A Certifying Authority (CA) is a third party that certifies a digital certificate utilized in confirming the identity of an individual or organization or a device over the Internet. The certificates are instrumental in the use of Public Key Infrastructure (PKI), which helps in executing encryption, authentication, and digital<\/p>\n","protected":false},"author":247,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"two_page_speed":[],"_jetpack_memberships_contains_paid_content":false,"_joinchat":[],"footnotes":""},"categories":[66],"tags":[5277],"class_list":{"0":"post-21015","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-cyber-law","7":"tag-cyber-law"},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts\/21015","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/users\/247"}],"replies":[{"embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/comments?post=21015"}],"version-history":[{"count":2,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts\/21015\/revisions"}],"predecessor-version":[{"id":21437,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/posts\/21015\/revisions\/21437"}],"wp:attachment":[{"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/media?parent=21015"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/categories?post=21015"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.legalserviceindia.com\/Legal-Articles\/wp-json\/wp\/v2\/tags?post=21015"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}