Certificate access tags allow granting role permissions on groups of certificates.  

As explained in Editing a single certificate, you can edit certificates in bulk to add certificate access tags.