A firm that can issue a digital signature for a piece of software that a software publisher intends to deploy to the Internet for download. When a user downloads the software, the certificate authority verifies the publisher's identity.