PEM-encoded X.509 certificate for the service principal.