Anchored The client certificate must be signed by a Trusted CA.

Unanchored The client certificate is self-signed or you wish to trust a specific certificate.