The onion address is the certificate, albeit not one that expires or can be revoked. As long as you get it from a trusted source, you should be good.