The People's Bank of China and 12 Bank set up a financial CFCA security certification center.

China Telecom Certification Center (CTCA)

Customs Certification Center (SCCA)

The Electronic Data Exchange Center of MOFTEC established Guo Fuan CA Security Certification Center.

Guangdong Electronic Commerce Certification Center (hereinafter referred to as Guangdong CA) is the person in charge of the "Internet Card" certification system.

UCA card authentication system headed by Shanghai ca

The so-called CA(Certificate Authority) certification center uses PKI(Public Key Infrastructure) technology to provide network identity authentication services. CA can be a non-governmental organization or a government agency. An authoritative and impartial third-party trust agency is responsible for the issuance and management of digital certificates, just like a company that issues certificates in our real life, such as a passport handling agency. Domestic CA certification centers are mainly divided into regional CA certification centers and industry CA certification centers.

The so-called root certificate is the basis of establishing trust relationship between CA certification center and users. A user's digital certificate must have a trusted root certificate to be valid. Technically, a certificate actually contains three parts, the user's information, the user's public key, and the information in the certificate signed by the CA center. To verify the authenticity of the certificate (that is, to verify whether the signature of the CA center on the certificate information is valid), it needs to be verified by the public key of the CA center. The public key exists in the certificate that signed the certificate, so it needs to be downloaded. However, to verify the authenticity of the certificate itself before using it, it needs to be used again. The answer is the root certificate. The root certificate is a special certificate, and its issuer is itself. Downloading the root certificate indicates that you trust all certificates issued under the root certificate. Technically speaking, it is to establish a chain to verify the certificate information, and the verification of the certificate ends when traced back to the root certificate. Therefore, users must download the root certificate before using the digital certificate.