make it possible to not manage the cert