Clarify that a single cert is like an SSH key pair.