/etc/icinga2/pki/ is in icinga2-common 2.4.1-2ubuntu1.
This file is owned by root:root, with mode 0o755.