certificate
Click on the red underlined text to get to the source
... For example, there is growing discussion of having a generic
mechanism for locating the keys or certificates associated with
particular application (servers) operated in (or for) a particular
domain ...
... domain. The following is a hypothetical case for storing application
key or certificate data for a given domain: the premise is that a
credentials ...
... client a credential with the
appropriate name. For X.509 certificates, the name would be in
either the subjectDN or the subjectAltName field. For Kerberos ...