This is the ca cert that is put in place when the puppet server is not the authorative ca server. so its no ca.