A certificate binds a public key to some identifying information (e.g., a URL or email address).

A certificate always contains both public and private keys.

A certificate needs to be verified by a trusted entity before it can be used.

A certificate may contain usage restrictions by the issuer (e.g., it can only be used to sign end-user certificates, not delegate certificates).