Specifies the client certificate that must be presented to the remote server for mutual authentication. This certificate is used to authenticate the client by the remote server, ensuring that the remote server is communicating with a trusted client. The client certificate must be issued by a trusted Certificate Authority (CA) and should match the client's private key. This parameter is applicable only when a TLS session is being used. Specifies the group of CA certificate(s) that the client must use to validate the certificate presented by the remote server. These CA certificates form a trust chain that the server certificate must match, ensuring that only servers with trusted certificates can establish a connection. This parameter supports multiple CA certificates to accommodate different server certificate issuers. This parameter is applicable only when a TLS session is being used. Specifies the server certificate to be presented by the server during the TLS handshake. This certificate is used to authenticate the server to remote clients, ensuring that the clients are connecting to a legitimate server. The server certificate must be issued by a trusted Certificate Authority (CA) and should match the server's private key. This parameter is applicable only when a TLS session is being used. Specifies the group of CA certificate(s) that the server must use to validate the certificate presented by the remote client. These CA certificates form a trust chain that the client certificate must match, ensuring that only clients with trusted certificates can establish a connection. This parameter supports multiple CA certificates to accommodate different client certificate issuers. This parameter is applicable only when a TLS session is being used. This object contains general information related to managing security features on the device. {{numentries}} {{numentries}} This table provides information about all types of public key-based credentials, such as X.509 certificates, see {{bibref|RFC5280}}. Enables or disables this certificate. The last modification time of this certificate. The Serial Number field in an X.509 certificate, see {{bibref|RFC5280}}. The Issuer field in an X.509 certificate, see {{bibref|RFC5280}}; i.e. the Distinguished Name (DN) of the entity who has signed the certificate. The beginning of the certificate validity period; i.e. the Not Before field in an X.509 certificate, see {{bibref|RFC5280}}. The end of the certificate validity period; i.e., the Not After field in an X.509 certificate, see {{bibref|RFC5280}}. The Distinguished Name (DN) of the entity associated with the Public Key; i.e., the Subject field in an X.509 certificate, see {{bibref|RFC5280}}. {{list}} Each item specifies an identity that is bound to the certificate's subject, and thus bound to the Public Key. The Subject Alternative Names extension field in an X.509 certificate, see {{bibref|RFC5280}}. The algorithm used in signing the certificate; i.e. the Signature Algorithm field in an X.509 certificate, see {{bibref|RFC5280}}. This table stores information about a group of Certificate Authorities (CAs). A CA is a trusted entity that issues digital certificates used to verify the identity of servers, clients, or other entities in secure communication protocols like TLS. This group defines a collection of trusted CA certificates that can be used to validate server certificates during TLS connections. Enables or disables this CA group. When disabled, the certificates within this group will not be used for validation. The textual name assigned to this CA group for identification. Specifies the CA certificate(s) that the client must use to validate the certificate presented by the remote server. These CA certificates form a trust chain that the server certificate must match, ensuring that only servers with trusted certificates can establish a connection. This parameter supports multiple CA certificates to accommodate different server certificate issuers. This parameter is applicable only when a TLS session is being used. Returns the path to the directory containing CA certificates. This is necessary for services, especially microservices in host or container environments requiring mTLS, to locate the appropriate CA certificates during configuration. Depending on the security requirements a service-specific CA directory may be required. This parameter specifies the absolute or relative path to the directory containing the CA certificate bundle, specified as an RFC-8089 URI (The file URI Scheme). Returns the path to a file containing one or more CA certificates. This is necessary for services, especially microservices in host or container environments requiring mTLS, to locate the appropriate CA certificates during configuration. Depending on the security requirements a service-specific CA file may be required. The absolute or relative path to the file containing the CA certificate(s), specified as an {{bibref|RFC8089}} URI (The file URI Scheme).