This isn't any different from the current SSL situation.
SSL certificates themselves are distributed throughout the internet on an individual site's web server, with the trust relationships consolidated into the CA hierarchy.