Can you scope a certficate connector

Fairly simple one for anyone with a certificate connector already set up. Can you scope a certificate connector or does it serve certificates for the entire tenant?