a public key certificate that identifies a root certificate authority. root certificate are self signed.