add detail about where to get cert