Registration Authorities: These are the lowest level of the hierarchy and are responsible for issuing certificates to individuals or entities for use in specific transactions or applications. The E-CSP  can delegate the role of registration and issuance to selected entities.

The National Public Key Infrastructure (PKI) ecosystem is  used to manage and secure digital communication within a country. It typically consists of a hierarchy of certification authorities (CAs) that issue and manage digital certificates, which are used to verify the identity of individuals or entities and establish trust in online transactions.

There is a root CA that provides a chain toward the subordinate CAs for purposes of Trust, the subordinate CA delegates the role of registration and issuance to a Registration Authority.

A public entity can contact GovCA and make a request to be onboarded, the entity once onboarded will be delegated as an RA and subsequently identify and issue digital certificates to the subscribers.