This illustration shows the SSL and SSO authentication section of the Notification subtab, and is explained in text.

In this section you can check a box indicating that SSL authentication is to be used to recognize users, and another box indicating that SSO authentication is to be used similarly. By default both are enabled, which means OCA can issue them a new certificate without administrator intervention.