# TlsOptions.LocalCertificate

[Type overview](/orleans/docs/api/csharp/microsoft.orleans.connections.security/orleans.connections.security.tlsoptions/) | [Properties](/orleans/docs/api/csharp/microsoft.orleans.connections.security/orleans.connections.security.tlsoptions/properties/)

[Source](https://github.com/dotnet/orleans/blob/e4e752cedecc2976811db49802c7a999b1f1c704/src/Orleans.Connections.Security/Security/TlsOptions.cs)

```csharp
public X509Certificate2 LocalCertificate
```

Specifies the local certificate used to authenticate TLS connections. This is ignored on server if LocalCertificateSelector is set.

To omit client authentication set to `null` on client and set [TlsOptions](/orleans/docs/api/csharp/microsoft.orleans.connections.security/orleans.connections.security.tlsoptions/) to [RemoteCertificateMode](/orleans/docs/api/csharp/microsoft.orleans.connections.security/orleans.connections.security.remotecertificatemode/) or [RemoteCertificateMode](/orleans/docs/api/csharp/microsoft.orleans.connections.security/orleans.connections.security.remotecertificatemode/) on server.

If the certificate has an Extended Key Usage extension, the usages must include Server Authentication (OID 1.3.6.1.5.5.7.3.1) for server and Client Authentication (OID 1.3.6.1.5.5.7.3.2) for client.