/etc/one/auth/certificates/ is in opennebula 3.4.1-4.1ubuntu1.
This file is owned by root:root, with mode 0o755.