In order to do certificate-based authentication, first of all,
you need to be able to identify yourself using a certificate
to which you have the private key.
You also need:
Copies of self-signed certificates of known peers,
and/or
One or more Certificate Authority certificates, and
lists of identities that they have signed.
These aspects can all be configured through the below lists:
Local identities (certificates to which you have the private key)
