A public-key certificate issued by a CA in one PKI to a CA in another PKI. (See: cross-certification.)