Except in this case, the smart card generates a new key _per domain name_