The common name of the trusted verifier's certificate. When the verifier is unsigned or untrusted, this holds the request origin instead.