...
3. A Catch-All CA (eduPKI CA) that provides digital X.509 certificates to users unable to rely on an NREN CA.
Digital certificates are issued by Certification Authorities (CAs) and are used to guarantee secure and reliable communication between servers, between users, or between a user and a server.
...