But, signing some data with a certificate only indicates that a key belongs to a particular name. It doesn't tell you whether the person or organization with that name is trustworthy.