The certificates settings (<certificates> tag) contains the trusted server certificates. This XML tag can be used either
inside the <settings> tag or
as an individual XML file whose URL is listed inside <setting-files> tag
The tag contains an attribute with the URL of the certificate file to fetch:
Please note that the download of the certificate is delayed after all provisioning xml files have been loaded and processed.
Beginning with firmware release 220.127.116.11/18.104.22.168 a second variant of this tag is supported, where the content of the certificate file is included as a base64 encoded string:
The benefit of this variant is, that the certificate is immediately available after processing the line in the provisioning XML. You can get the base64 encoded certificate out of the PEM format, removing the BEGIN / END taglines: