PEM certificate of the PKI used for validation. Must only contain one ca certificate(either root or intermediate cert).