Certificate authorities are companies that verify other entities (companies, organizations, individuals) and confirm that they are indeed who they say they are. Upon such verification, a CA signs the certificate using its own certificate. Your browser will automatically recognize such a certificate as a valid one. This prevents many security problems including some types of man-in-the-middle attacks like IDN homograph attacks.
Learn more about man-in-the-middle attacks.