Which is used to verify that a secure Web site is legitimate?

Which is used to verify that a secure Web site is legitimate?
A. Active Directory
B. Enterprise trust
C. Private key
D. Digital certificate