A process that creates special signed messages called certificates, which state that a particular public key is associated with a particular user or server name.