Ledger-anchored trust registries

every issuer publishes its keys at a certain URL, the whole structure is signed by a trusted authority

Uses JWTs and REST APIs to represent trust chains and trust marks

Uses DNS records and ETSI Trusted Lists for trust management, developed in the EU Project NGI ESSIF-Lab, https://train.trust-scheme.de/info/

used by EU Trusted List (https://webgate.ec.europa.eu/tl-browser/)

The verifier knows which issuers he trusts for issuing certain credentials, organizational solution

Trust is managed by way of attributes attested in the certificate (e.g. could be role of an issuer) in combination with trust chains. The ultimate entity in the chain is typically trust anchor recipients need to rely in.