`CertifiedKey` reads like "a key that is (somehow) certified", when we actually mean "a certificate together with the key(pair) used to sign it". Perhaps `CertificateWithKey` would be fine?