Answers the most valid certificates one holder of a kind may hold.
'person' or 'application'; a person when absent
the configured cap
Answers the most valid certificates one holder of a kind may hold.