As it uses SSL, it requires a certificate. SFTP was designed as an extension of SSH to provide file transfer capability, so it usually uses only the SSH port for both data and control