Into The Jaws Of Doom The Ultimate Challenge R. L. Stine

Certificates are issued by CAs. Web PKI requires user agents and domain owners to trust that CAs are tying domains to the right domain owners. A user agent is something that acts on behalf of a user, usually a browser.