Computer security

What is the principal role of a certificate authority in a public-key infrastructure?