...

/usr/share/pki/sb-certs/secureboot-kernel-aarch64.cer