add certs; clean up;