This certificate is an undeniable root of trust (e.
g. normally, this is a certificate controlled by the user themselves).