PKI means using public keys, for infrastructure. you are thinking of x.509 and other certificate authorities. that's not PKI that's one of several. PGP uses web of trust, and TOFU (trust on first use). nostr is pretty much a variant of TOFU