Certificate mapping policy. Policy contains certificate mappings.