[CentOS] [PKI concepts] Why Jboss need (signed cert and) root-cert in PEM format?