Lazy certificate generation.
No orphan certificate.
Handling empty keys.
More simple.