Principal that associates the given name with the authenticated certificate chain.
The name is derived from the certificate used to authenticate the user. This id may be the entire certificate itself, but may also be the subjectDN retrieved from the certificate or the username matched with an attribute in the certificate.