support for attribute certificates