A Certificate Role or Custom Role created by an administrator as explained in Creating a role.