and acme, you have centralized authority that will provide a new certificates based on resuest and all those certs can be verified by ca authority, which is usualy single certificate