The semicolon indicates that this patch needs a `gofmt`. Also, this should be a pointer so that we don't save an empty certificate structure into memory for non-TLS domains.