pull CertificateData to Certificate