X509 PEM encoded certificate. Can be additionally base64 encoded (as provided by Amazon EKS).