Which entity verifies identities before certificates are issued?

• A. Registration Authority (RA)
• B. Certificate Authority (CA)
• C. Certificate Revocation List (CRL)
• D. Hierarchical Trust Model

Answer: (A)

The key idea is how identity proofing fits into issuing a digital certificate. In a PKI, verifying the applicant’s identity happens during enrollment, and this job is handled by the Registration Authority. The RA collects the necessary information, checks documents or credentials, and confirms that the requester meets policy requirements. Once identity verification is completed, the RA forwards the validated request to the Certificate Authority, which then issues and signs the certificate that binds the public key to that verified identity. The Certificate Revocation List is used to check whether a certificate has been revoked, not to verify identities. The hierarchical trust model describes how trust is structured among authorities (root and subordinate CAs) rather than performing identity verification itself. So, the entity responsible for verifying identities before certificates are issued is the Registration Authority.