add jwt support
add cert export