add certificate support