A trust anchor used when validating a target endpoint's TLS certificate.
The source that Security Agent reads the certificate from.