The main feature of a PKI is the introduction of what is known as a Certification Authority, orCA, whichisahumanentity ??? a person, group, department, company, or other association ??? that an organization has authorized to issue certificates to its computer users. (A CA's role is analogous to a country's government's Passport Office.) A CA creates certificates and digitally signs them using the