An agreement that binds public keys with respective user identities by means of a certificate authority (CA).
For more information, see Public key infrastructure