This is a flag parameter. When set, only a partial CA
certificate chain is required to validate TLS peer certificates. This
functionality is required when restricting valid CA certificates to only a
subset of CA hierarchy. This is not set by default.