Public certificates are transitioning from multi-purpose root hierarchies to single-purpose ones. We discuss why.