Which keystore would a vSphere Replication administrator use to manually add an additional Certificate Authority certificate?

Which keystore would a vSphere Replication administrator use to manually add an additional Certificate Authority certificate?
A. hms-truststore.jks
B. hms-keystore.jks
C. certificates.ks
D. cacerts.ks