1. A device comprising: on-chip non-volatile (NV) memory including: a device ID; a private key; an issuer ID; a first signature; a certificate generating module coupled to the non-volatile memory configured to: read the device ID, private key, issuer ID, and first signature from the NV memory; compute a public key as a function of the private key; construct a device certificate as a function of the device ID, issuer ID, public key, and first signature; an interface coupled to the certificate generating module, wherein, in operation, a request for the device certificate is received on the interface, the certificate generating module constructs the device certificate, and the device certificate is sent via the interface in response to the request.