CertificateManager can be a local.