certificates encrypt web traffic companies exist to create world trusted certs these certs are signed by their private key with a random hash generated that’s globally unique is not random enough