A public-key certificate managed by the highest authority (untrusted authority, Root CA) that issues certificates or self-signed certificate. In general, the public key of a trusted Root CA (Verisign, Geotrust, etc.) is embedded in the OS, and through that public key, it is checked whether the certificate used by the web server is a trusted certificate.