Why does HTTPS use certificates?
Short answer
Certificates bind a site name to a public key, helping verify the peer and start encrypted communication.
How it works
A certificate does not guarantee that a site’s content is trustworthy. Identity, certificate validity, and content judgment are separate questions.
Key point
The practical point is this: Identity, certificate validity, and content judgment are separate questions.