The major AAM release is live! For questions or concerns, visit the Release Page. 
service.jwt.private_cert_path
Less than 1 minute
Syntax
service.jwt.private_cert_path = "string"
The default value: null
Definition
Absolute path to the private certificate for JWT token issuer when the signing algorithm is RS256, RS384, or RS512.
In the example below, we point to the private certificate on the server.
[aam]
service.jwt.signing_algorithm = "rs256"
service.jwt.private_cert_path = "/usr/private/signing_cert.key"