Data signed (guaranteed) by an issuer (Trust authority)
Data bound to a subject
Identity, cryptographic key
Data has validity constraints
Exiration time, Revocation Information, etc.
Data may be bond to a target
Used in conjunction with trusted channel
Examples
Certificate, Kerberos ticket