[frutiger]

You can do SSH certificates that can sign and revoke keys. For some reason, most people assume TLS when you mention the word certificate. Read the CERTIFICATES section in ssh-keygen(1).

[creshal]

True, but you still need to build your own infrastructure to roll out the CA, vs. X.509, which is implicitly handled by all OSes.