The top-level trust anchor certificate in a PKI hierarchy, typically self-signed and tightly protected.