A
digital certificate binds a public key to an identity, signed by a trusted CA. X.509 is the standard format. Contains: subject, issuer, public key, validity period, signature.
When you visit HTTPS sites, your browser verifies the server's certificate was signed by a trusted CA. Self-signed certificates trigger browser warnings — no CA has vouched for them.