The super idea is that anyone with a npub can be a credential issuing authority. It’s one thing not to know who is the relevant credential issuing authority, it’s an entirely another thing to have to rely on a ‘certificate authority’ cartel to issue a certificate on your behalf and according to their rules. TBH, along with zaps, I find this to be one of the most exciting aspects of #nostr.