The Common Name ("Issued to" or "CN") of the certificate (inside the TPP) to use for code signing.

You can obtain a list of Common Names with 'cspconfig listcertificates' and checking what comes after 'CN='.

Either a subject name or SHA-1 hash of the signing certificate must be given.