"Each permission includes data which is associated with one or more types of actions which are authorized by the certificate." . . . .