How This Binding is Accomplished  The CA has a public and private key pair, just like people and devices  The CA uses its private key to sign the body of the certificate, just as people use personal private keys to sign messages  To verify, one must use the CA's public key to decrypt the signature, just as one would verify a personal signature from another user!
{}