Which cryptographic key is contained in an X.509 certificate?