Isn't identity the entire point of certificates? Why use certificates if you only care about encryption?