programs.ssh.knownHosts.<name>.certAuthority

This public key is an SSH certificate authority, rather than an individual host's key.