A user's public key digitally signed by the certificate authority. The software sends the certificate with an encrypted
message to verify the sender's identity. The recipient uses the CA's public key, which is widely publicized, to decrypt the sender's public key attached to the message. Then the sender's key is used to decrypt the message. (Definition ZDNet) To get one, you need to apply for an SSL, then a CSR will be generated. You then take the CSR information to a certificate authority like VeriSign. The certificate will then be installed in your secure directory. - Updated: