Here we use certificate as naming, but in reality it is a key.
Leaving this issue as a reminder for myself to change it.
Extra: If we release a change with this, it should be either a major to point out there are breaking changes or keep both parameters for backwards compatibility.