apps: use platform cert