One or several Certificate Access Tags

Certificate Roles with any of these tags will grant permissions on the certificate.