Technical dictionary
SSH certificate
CA-signed SSH identity for users or hosts—improves scale vs TOFU host keys.
Definition
SSH certificates bind public keys to principals with validity windows, issued by an SSH CA. They reduce known_hosts sprawl and enable short-lived access.
CA and user/host keys are still classical public-key objects in common deployments—include them in PQC inventories.