shim.crt - Certificated embedded within shim used to validate kernel, grub : How is this certificate embedded inside shim image ?

shim.crt is created as part of the build process for the 'shim' package.   Refer to

    stx/integ/security/shim-unsigned/centos/patches/0001-Use-Titanium-certificate.patch