Comment by jodrellblank

Certificates have a private key and a public key, and you keep the private key secret and move the public key around, so ... how is that different, technically and organizationally?

What do you actually do, and how is it better?