In a public key infrastructure (PKI), which component is responsible for issuing and revoking digital certificates?