Certificate Roles with any of these tags will grant permissions on the certificate.