Request hander only needs private key; certificate is necessary only for discovery service