use of package data instead of file data for the certificate