Terminal owners and carriers can enter certificates.
Terminal owners can manage all certificates that are associated with their configured requirements.
Carriers can manage certificates across multiple terminal owners. Carriers can not edit certificates entered by the terminal owner.