Capabilities for self-signed certificate

NetworkServices LocalServices ReadUserData WriteUserData UserEnvironment

Capabilities for unsigned certificates

NetworkServices LocalServices ReadUserData WriteUserData Location UserEnvironment PowerMgmt 
ProtServ SwEvent SurroundingsDD ReadDeviceData WriteDeviceData TrustedUI