sign with platform certificate