Certificate (stored locally on our desktop, notebook, tablet, phone etc.) that holds a variety of identity oriented entity relationships (claims or statements). These relationships associate the certificate's Subject with other entities such as: Public Key components, Certificate Fingerprints, other identifiers (e.g., the SubjectAlternativeName [SAN] which can hold an HTTP URI that "refers to" a Person, Organization, Software") etc.