Instances of this interface manage which X509 certificate-based
 key pairs are used to authenticate the local side of a secure
 socket.
 
 During secure socket negotiations, implentations
 call methods in this interface to:
 
 -  determine the set of aliases that are available for negotiations
      based on the criteria presented,
 
-  select the  best alias based on
      the criteria presented, and
 
-  obtain the corresponding key material for given aliases.
 
 Note: the X509ExtendedKeyManager should be used in favor of this
 class.