Certificate should be provided at instance cratinon time