you have a digital certificated which gave you some sort of proof thay you own a public key. you can use it in ssh, web,.... the question is how do you validate that the certificate is genuine?