keystore

The file holding a broker's or client's own private key and certificate, which it presents during the TLS handshake.

A broker always needs one to serve TLS; a client needs one only for mutual TLS. Its partner, the truststore, holds the authorities it trusts instead.