This identifies a previously installed certificate that authenticates this network element for a key synchronization session that uses certificate-based authentication. It matters because if this value is left at its default of none while keySyncSessionAuthType requires a certificate, the session cannot establish TLS trust with the remote peer and key sync will fail. For example, an administrator setting up certificate-based key sync must first install a device certificate via the certificate table and then reference its name in keySyncSessionLocalCertificate before the session can connect.