Certificate authorities anchor trust by chaining digital signatures from your device back to a root store, creating a verifiable path that prevents man-in-the-middle attacks.
Your browser rejects connections not because of encryption strength, but because it cannot verify the identity of the server presenting the certificate.
