certification authority whose certificates can be verified because its public verification key(s) are written as read-only data into the ERT before the ERT is customized or commissioned