what is the role of a certifying authority?