A digital certificate issued for your domain by a Certificate Authority. You buy it, the authority then verifies that the domain — and, for Extended Validation, the organisation — is really yours, and only then is the certificate issued. The verification is the product; the file is what it leaves behind.
More on SSL certificates