DomainServer::readX509KeyAndCertificate() returns "true" if both cert and key are empty.  Is this correct behavior?