The selector specifies which part of the TLS certificate presented by the server will be matched against the association data.