An object identifying the certificate authority that is currently signing certificates for the cluster.