Your account ID is exposed in the certificate generated; what's the real difference?