Which of the following is responsible for maintaining certificates in a public key infrastructure (PKI)?