PKCS11

certificate or key is stored as a URI of an object on a PKCS#11 token