A signed list of root certification authority certificates that an administrator considers reputable for designated purposes, such as client authentication or secure e-mail.