1. A device comprising: on-chip non-volatile memory including: a device ID; a private key; an issuer ID; a first signature; a certificate generating module coupled to the non-volatile memory configured to: read the device ID, the private key, the issuer ID, and the first signature from the non-volatile memory; compute a public key as a function of the private key; construct a device certificate as a function of the device ID, the issuer ID, the public key, and the first signature; an interface coupled to the certificate generating module, wherein, in operation, a request for the device certificate is received on the interface, the certificate generating module constructs the device certificate, and the device certificate is sent via the interface in response to the request; wherein the device is further configured to: create a temporary key pair having two keys, a temporary public key and a temporary private key, using a number generator; create an application certificate by signing data including the temporary public key, using a stored private key; using the temporary private key to compute a second signature as a function of a random number; wherein the second signature and the random number are sent via the interface in response to the request, along with the device certificate.