Root CA

Also written: root, root certificate, root.crt

The top CA of a PKI. Its self-signed root certificate sits in trust stores and its private key is kept offline, used only to sign intermediates.