A root certificate is a top-level certificate authority (CA) certificate that acts as a trust anchor. Operating systems and applications use it to validate certificate chains: a website, service, or signer’s certificate may be issued through intermediate CAs whose chain ultimately leads to a trusted root.
Root certificates matter because trusting one can extend trust to many certificates beneath it. If a root is removed from a trust store or marked as untrusted, chains that depend on it may no longer validate, potentially blocking secure connections or signed content. In real attacks, an attacker who can misuse a trusted CA’s keys may try to obtain certificates that appear legitimate. Defenders respond by distributing trust-store updates, then verifying that devices and applications have received them; different platforms may manage trust separately.