A path to a PEM-encoded certificate provided to the remote agent; requires use of key_file or key_pem.