Currently if you choose "Include only in tenanted deployments" when adding a new Certificate to your library you are required to:

A) Select all of the tenants to be associated with that Certificate
B) Select a Tenant Tag to associate with the cert

This is restrictive. Why can't all Tenants just have access to the Certificate? When you only do Tenanted deployments you have to remember to tag the newly created tenant or go back to the cert and add them to the list. Its cumbersome to maintain.

There should be a toggle for ALL tenants on the cert.