Public versus private certificates