An X.509 extension identifying the issuing CA key to help clients build and validate certificate chains.