decode entities in certificate