What does a Certificate Authority attest by signing a digital certificate?
That the subject's service has no vulnerabilities
That the certificate's public key belongs to the named subject
That the subject's private key has been published
That the certificate remains valid forever