When a browser tries to connect with web server, it always checks whether the server has a valid authority’s SSL certificate or not. A browser must hold CA Certificate in its “Trusted Root records” in order to “trust” certificates signed by the CA’s private key. Such SSL certificates are called “Single Root certificate”.