Thank You MacsWork
I appreciate you taking the time to reply.

Now the whole certificates in the keychain thing makes sense (I think).
If I understand correctly- If the certificate says, for instance, Taiwan Post, it isn't necessary me having a certificate for Taiwan Post's web site; rather a company with a scure site I go to, such as a bank, paid Taiwan Post to issue a certificate for their (the bank's) secure site.
Did I get it right?