Hi,
Pardon me if I am wrong, but under the
constraint of a single certificate per key,
the holder of the certificate can no longer
act on a trusted as well as non trusted
basis. The person concerned may not always
intend the intent of certificate to be
trusted even though he might have full intent
of accepting non-repudiation of the sent
information.
Regards
abhishek gupta