Let's say an online business is about to launch their website, and they want to
obtain a digital certificate.
When they register their domain, the hosting company sends certain information over to a trusted certificate authority, or CA.
The information provided is usually basic things like the company name and the country where its headquarters are located.
A public key for the site is also provided.
The certificate authority then uses this data to verify the company's identity.
When it's confirmed, the CA encrypts the data with its own private key.
Finally, they create a digital certificate that contains the encrypted company data.
It also contains CA's digital signature to prove that it's authentic.